diff --git a/.github/workflows/copilot-deploy-backend.yml b/.github/workflows/copilot-deploy-backend.yml
index 50a0cfe71..78e133a26 100644
--- a/.github/workflows/copilot-deploy-backend.yml
+++ b/.github/workflows/copilot-deploy-backend.yml
@@ -26,12 +26,11 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   webapi:
     environment: ${{inputs.ENVIRONMENT}}
-    permissions:
-      id-token: write
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/copilot-deploy-memorypipeline.yml b/.github/workflows/copilot-deploy-memorypipeline.yml
index 7cd36de8e..348f2252c 100644
--- a/.github/workflows/copilot-deploy-memorypipeline.yml
+++ b/.github/workflows/copilot-deploy-memorypipeline.yml
@@ -22,12 +22,11 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   memorypipeline:
     environment: ${{inputs.ENVIRONMENT}}
-    permissions:
-      id-token: write
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/copilot-deploy-pipeline.yml b/.github/workflows/copilot-deploy-pipeline.yml
index 32ffb6880..15f9f4c96 100644
--- a/.github/workflows/copilot-deploy-pipeline.yml
+++ b/.github/workflows/copilot-deploy-pipeline.yml
@@ -45,7 +45,7 @@ jobs:
       BACKEND_HOST: ${{needs.int.outputs.backend-host}}
 
   stable:
-    needs: int-tests
+    needs: [int-tests, build-webapi, build-memorypipeline, build-plugins]
     uses: ./.github/workflows/copilot-deploy-environment.yml
     with:
       ENVIRONMENT: stable
diff --git a/.github/workflows/copilot-deploy-plugins.yml b/.github/workflows/copilot-deploy-plugins.yml
index d70e7cc27..18944c057 100644
--- a/.github/workflows/copilot-deploy-plugins.yml
+++ b/.github/workflows/copilot-deploy-plugins.yml
@@ -22,12 +22,11 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   plugins:
     environment: ${{inputs.ENVIRONMENT}}
-    permissions:
-      id-token: write
     strategy:
       fail-fast: false
       matrix: