diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index b639e790..04c91abf 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -30,6 +30,10 @@ on:
         type: string
         default: "dbt-labs/dbt-athena"
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   integration-tests:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 5a7fc300..a9275130 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -30,13 +30,6 @@ on:
         type: string
         default: "dbt-labs/dbt-athena"
 
-permissions:
-  contents: read
-
-defaults:
-  run:
-    shell: bash
-
 jobs:
   unit-tests:
     runs-on: ubuntu-latest
@@ -54,4 +47,5 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - uses: pypa/hatch@install
       - run: hatch run unit-tests
+        shell: bash
         working-directory: ./${{ inputs.package }}