diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 8aef28cdd..d0e07cbee 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,6 +1,6 @@
 ## Dockerfile for devcontainer
 
-FROM mcr.microsoft.com/devcontainers/base:debian AS base
+FROM mcr.microsoft.com/devcontainers/base:bookworm AS base
 
 ARG USER=vscode
 ARG GROUP=vscode
diff --git a/.github/workflows/RustNightly.yml b/.github/workflows/RustNightly.yml
index 744a0f2f8..71aad6dba 100644
--- a/.github/workflows/RustNightly.yml
+++ b/.github/workflows/RustNightly.yml
@@ -8,6 +8,10 @@ on:
     # 12:00 AM, every 2 days
     - cron: '0 0 */2 * *'
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   musl:
     strategy: