diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index e50b6b11d..1e32770d6 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -8,6 +8,9 @@ on:
       - dev
       - workload-identity-federation
 
+permissions:
+  id-token: write
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index e15e52f8e..18c5598ea 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -1,5 +1,7 @@
 name: Unittests
-on: push
+on:
+  workflow_dispatch: {}
+  # push
 
 jobs:
   run-unittests: