diff --git a/.github/workflows/update-create-plugin.yml b/.github/workflows/update-create-plugin.yml
index 6d553591..9b4a980e 100644
--- a/.github/workflows/update-create-plugin.yml
+++ b/.github/workflows/update-create-plugin.yml
@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write # Needed for create-github-app-token
   pull-requests: write
 
 jobs: