diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f32a0da..0a45688 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,13 +34,18 @@ jobs:
       matrix:
         runner: [macos-13, macos-15, ubuntu-22.04]
     runs-on: ${{ matrix.runner }}
-    permissions:
-      contents: read
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
     - uses: cgrindel/gha_set_up_bazel@v1
       with:
         repo_name: credential-helper
+    - name: Setup tmate session
+      uses: mxschmitt/action-tmate@v3
+      env:
+        GH_TOKEN: ${{ secrets.GH_TOKEN }}
+        OTHER_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        limit-access-to-actor: false
     - name: Execute Integration Tests
       shell: bash
       run: bazelisk test //:all_integration_tests