diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
index d02c52c364..d683642313 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -14,8 +14,11 @@ jobs:
 
     permissions:
       contents: write
+      id-token: write
 
     timeout-minutes: 60
+    env:
+      NPM_CONFIG_PROVENANCE: true
 
     steps:
       - name: Checkout