diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 394d53b43..b60ea5a9e 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -25,6 +25,9 @@ jobs:
         python_version: ["3.10"]
         cuda_arch_version: ["12.1"]
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       repository: pytorch/tensordict
       upload-artifact: docs
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 5fd055f85..1f7c5a47d 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -18,6 +18,9 @@ concurrency:
 jobs:
   python-source-and-configs:
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       repository: pytorch/tensordict
       script: |
@@ -46,6 +49,9 @@ jobs:
 
   c-source:
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       repository: pytorch/tensordict
       script: |
diff --git a/.github/workflows/test-linux.yml b/.github/workflows/test-linux.yml
index 4bc66eab5..9e0b6da68 100644
--- a/.github/workflows/test-linux.yml
+++ b/.github/workflows/test-linux.yml
@@ -26,6 +26,9 @@ jobs:
         cuda_arch_version: ["12.1"]
       fail-fast: false
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: linux.g5.4xlarge.nvidia.gpu
       repository: pytorch/tensordict
@@ -57,6 +60,9 @@ jobs:
         python_version: ["3.9", "3.10", "3.11", "3.12"]
       fail-fast: false
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: linux.12xlarge
       repository: pytorch/tensordict
@@ -84,6 +90,9 @@ jobs:
         cuda_arch_version: ["12.1"]
       fail-fast: false
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: linux.g5.4xlarge.nvidia.gpu
       repository: pytorch/tensordict
@@ -116,6 +125,9 @@ jobs:
         python_version: ["3.9", "3.12"]
       fail-fast: false
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: linux.12xlarge
       repository: pytorch/tensordict
diff --git a/.github/workflows/test-rl-gpu.yml b/.github/workflows/test-rl-gpu.yml
index e38059a94..6439a91f9 100644
--- a/.github/workflows/test-rl-gpu.yml
+++ b/.github/workflows/test-rl-gpu.yml
@@ -26,6 +26,9 @@ jobs:
         cuda_arch_version: ["12.1"]
       fail-fast: false
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
+    permissions:
+      id-token: write
+      contents: read
     with:
       runner: linux.g5.4xlarge.nvidia.gpu
       repository: pytorch/tensordict