diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9cc1381..b20dfdd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,10 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   lint:
     runs-on: ubuntu-latest
@@ -90,7 +94,6 @@ jobs:
         with:
           mode: ${{ matrix.codspeed-mode }}
           run: examples/google_benchmark_cmake/build/benchmark_example
-          token: ${{ secrets.CODSPEED_TOKEN }}
 
   bazel-integration-tests:
     strategy:
@@ -130,7 +133,6 @@ jobs:
         with:
           mode: ${{ matrix.codspeed-mode }}
           run: bazel run //examples/google_benchmark_bazel:my_benchmark --@codspeed_core//:codspeed_mode=${{ matrix.codspeed-mode }} --@codspeed_core//:strict_warnings=on
-          token: ${{ secrets.CODSPEED_TOKEN }}
 
   cmake-build:
     strategy:
diff --git a/core/CMakeLists.txt b/core/CMakeLists.txt
index a359dc1..879026d 100644
--- a/core/CMakeLists.txt
+++ b/core/CMakeLists.txt
@@ -15,7 +15,7 @@ include(FetchContent)
 FetchContent_Declare(
     instrument_hooks_repo
     GIT_REPOSITORY https://github.com/CodSpeedHQ/instrument-hooks
-    GIT_TAG b1e401a4d031ad308edb22ed59a52253a1ebe924
+    GIT_TAG 89fb72a076ec71c9eca6eee9bca98bada4b4dfb4
 )
 FetchContent_MakeAvailable(instrument_hooks_repo)
 FetchContent_GetProperties(instrument_hooks_repo)
diff --git a/core/instrument-hooks b/core/instrument-hooks
index 1460da1..89fb72a 160000
--- a/core/instrument-hooks
+++ b/core/instrument-hooks
@@ -1 +1 @@
-Subproject commit 1460da12ab87b17ec021706c7f084210269ed024
+Subproject commit 89fb72a076ec71c9eca6eee9bca98bada4b4dfb4