diff --git a/.github/workflows/marvin-dedupe-issues.yml b/.github/workflows/marvin-dedupe-issues.yml
index 9c943f9d4..a7ba89f68 100644
--- a/.github/workflows/marvin-dedupe-issues.yml
+++ b/.github/workflows/marvin-dedupe-issues.yml
@@ -17,6 +17,7 @@ jobs:
     permissions:
       contents: read
       issues: write
+      id-token: write
 
     steps:
       - name: Checkout repository
@@ -73,6 +74,7 @@ jobs:
       - name: Run Marvin dedupe command
         uses: anthropics/claude-code-action@v1
         with:
+          github_token: ${{ steps.marvin-token.outputs.token }}
           prompt_file: /tmp/claude-prompts/dedupe-prompt.txt
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY_FOR_CI }}
           claude_args: |
diff --git a/.github/workflows/marvin-label-triage.yml b/.github/workflows/marvin-label-triage.yml
index a31991b3e..9cba2c6a5 100644
--- a/.github/workflows/marvin-label-triage.yml
+++ b/.github/workflows/marvin-label-triage.yml
@@ -24,6 +24,7 @@ jobs:
       contents: read
       issues: write
       pull-requests: write
+      id-token: write
 
     steps:
       - name: Checkout base repository
@@ -148,6 +149,7 @@ jobs:
       - name: Run Marvin for Issue Triage
         uses: anthropics/claude-code-action@v1
         with:
+          github_token: ${{ steps.marvin-token.outputs.token }}
           prompt_file: /tmp/claude-prompts/triage-prompt.txt
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY_FOR_CI }}
           claude_args: |