diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml
index 6825eff0fe4..c759ae420e4 100644
--- a/.github/workflows/pull.yml
+++ b/.github/workflows/pull.yml
@@ -357,10 +357,16 @@ jobs:
 
   android:
     uses: ./.github/workflows/_android.yml
+    permissions:
+      id-token: write
+      contents: read
     needs: test-llama-runner-linux
 
   unittest:
     uses: ./.github/workflows/_unittest.yml
+    permissions:
+      id-token: write
+      contents: read
     with:
       docker-image: executorch-ubuntu-22.04-clang12