diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 8433ecef..540cf51d 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -31,6 +31,7 @@ on:
 permissions:
   contents: read
   issues: write
+  id-token: write                    # Required by anthropics/claude-code-action for OIDC
 
 jobs:
   review: