diff --git a/.github/workflows/auto-update.yaml b/.github/workflows/auto-update.yaml
index 0956200..695b373 100644
--- a/.github/workflows/auto-update.yaml
+++ b/.github/workflows/auto-update.yaml
@@ -23,6 +23,7 @@ permissions:
   contents: write # Allows writing content to the repository.
   packages: read # Allows reading the content of the repository's packages.
   pull-requests: write # Allows creating or updating pull requests.
+  id-token: write # Required by uds-common auto-update workflow to authenticate with chainguard
 
 # Abort prior jobs in the same workflow / PR
 concurrency: