diff --git a/infra/terraform/accounts/nonprod/main.tf b/infra/terraform/accounts/nonprod/main.tf
index 49fa96b258..1d332a808b 100644
--- a/infra/terraform/accounts/nonprod/main.tf
+++ b/infra/terraform/accounts/nonprod/main.tf
@@ -31,7 +31,8 @@ module "account" {
   github_oidc_subjects = concat(
     [
       "dvsa/vol-app:ref:refs/heads/main",         # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`.
-      "dvsa/vol-app:environment:account-nonprod", # `.github/workflows/deploy-account.yaml`.
+      "dvsa/vol-app:environment:account-nonprod",
+      "dvsa/vol-app:pull_request", # `.github/workflows/deploy-account.yaml`.
     ],
     [
       for env in local.environments : "dvsa/vol-app:environment:${env}" # `.github/workflows/deploy-environment.yaml`
diff --git a/infra/terraform/accounts/prod/main.tf b/infra/terraform/accounts/prod/main.tf
index a1a91bf79b..d6eafba2b9 100644
--- a/infra/terraform/accounts/prod/main.tf
+++ b/infra/terraform/accounts/prod/main.tf
@@ -31,7 +31,8 @@ module "account" {
   github_oidc_subjects = concat(
     [
       "dvsa/vol-app:ref:refs/heads/main",      # `.github/workflows/docker.yaml` & `.github/workflows/assets.yaml`.
-      "dvsa/vol-app:environment:account-prod", # `.github/workflows/deploy-account.yaml`.
+      "dvsa/vol-app:environment:account-prod",
+      "dvsa/vol-app:pull_request", # `.github/workflows/deploy-account.yaml`.
     ],
     [
       for env in local.environments : "dvsa/vol-app:environment:${env}" # `.github/workflows/deploy-environment.yaml`