diff --git a/.github/workflows/sdk_generation.yaml b/.github/workflows/sdk_generation.yaml
index 2cf4cc5..3d17d92 100644
--- a/.github/workflows/sdk_generation.yaml
+++ b/.github/workflows/sdk_generation.yaml
@@ -4,7 +4,8 @@ permissions:
   contents: write
   pull-requests: write
   statuses: write
-"on":
+  id-token: write
+on:
   workflow_dispatch:
     inputs:
       force:
@@ -15,6 +16,8 @@ permissions:
     - cron: 0 0 * * *
 jobs:
   generate:
+    runs-on: ubuntu-latest
+    steps:
     - name: "Authenticate with AWS"
       uses: goshippo/shippo-action-workflows/.github/actions/aws_auth@v1.1.0
       with:
@@ -34,6 +37,6 @@ jobs:
         force: ${{ github.event.inputs.force }}
         mode: pr
         speakeasy_version: latest
-      secrets:
+      env:
         github_access_token: ${{ secrets.GITHUB_TOKEN }}
         speakeasy_api_key: ${{ env.DEV_MAIN_SPEAKEASY_API_KEY_PHP_API_KEY }}
\ No newline at end of file
diff --git a/.github/workflows/sdk_validation.yaml b/.github/workflows/sdk_validation.yaml
index 426f2df..6350637 100644
--- a/.github/workflows/sdk_validation.yaml
+++ b/.github/workflows/sdk_validation.yaml
@@ -1,5 +1,7 @@
 name: Validate
-
+permissions:
+  contents: write
+  id-token: write
 on:
   workflow_call:
   pull_request: