diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3d35e1a..2813597 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,6 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
     env:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -39,7 +40,7 @@ jobs:
         run: npm run build
 
       - name: Publish npm package
-        run: npm publish --access public
+        run: npm publish --provenance --access public
 
       - name: Determine new version
         id: version