diff --git a/.github/chainguard/channel-versions-dispatch.sts.yaml b/.github/chainguard/channel-versions-dispatch.sts.yaml
new file mode 100644
index 000000000..875c53bbf
--- /dev/null
+++ b/.github/chainguard/channel-versions-dispatch.sts.yaml
@@ -0,0 +1,6 @@
+issuer: https://token.actions.githubusercontent.com
+subject: repo:warpdotdev/channel-versions:ref:refs/heads/main
+claim_pattern:
+  job_workflow_ref: warpdotdev/channel-versions/\.github/workflows/update_channels\.yml@refs/heads/main
+permissions:
+  contents: write
diff --git a/.github/chainguard/warp-internal-dispatch.sts.yaml b/.github/chainguard/warp-internal-dispatch.sts.yaml
new file mode 100644
index 000000000..449bec81e
--- /dev/null
+++ b/.github/chainguard/warp-internal-dispatch.sts.yaml
@@ -0,0 +1,6 @@
+issuer: https://token.actions.githubusercontent.com
+subject: repo:warpdotdev/warp-internal:ref:refs/heads/master
+claim_pattern:
+  job_workflow_ref: warpdotdev/warp-internal/\.github/workflows/notify-docs-settings-changed\.yml@refs/heads/master
+permissions:
+  contents: write
diff --git a/.github/chainguard/warp-server-docs-sync.sts.yaml b/.github/chainguard/warp-server-docs-sync.sts.yaml
new file mode 100644
index 000000000..546a0831c
--- /dev/null
+++ b/.github/chainguard/warp-server-docs-sync.sts.yaml
@@ -0,0 +1,7 @@
+issuer: https://token.actions.githubusercontent.com
+subject_pattern: repo:warpdotdev/warp-server:ref:refs/heads/(develop|release/[^:]+)
+claim_pattern:
+  job_workflow_ref: warpdotdev/warp-server/\.github/workflows/sync_public_openapi_to_docs\.yml@refs/heads/(develop|release/.+)
+permissions:
+  contents: write
+  pull_requests: write