diff --git a/.github/workflows/crawl.yaml b/.github/workflows/crawl.yaml
index c8f127aa0..037f41f68 100644
--- a/.github/workflows/crawl.yaml
+++ b/.github/workflows/crawl.yaml
@@ -9,6 +9,7 @@ on:
   - cron: '0 6 * * *' # Daily at 6 AM
 
 permissions:
+  id-token: write # Enable OIDC
   contents: write
 
 jobs:
@@ -18,7 +19,10 @@ jobs:
     - uses: actions/checkout@v2
     - uses: actions/setup-go@v2
       with:
-        go-version: 1.17.x
+        go-version: 1.18.x
+    # Install and setup gitsign so commits are signed by OIDC.
+    - uses: wlynch/gitsign-action@main
+
     - uses: google-github-actions/setup-gcloud@v0
       with:
         install_components: alpha,beta