diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9ea9a57..df828a6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -2,6 +2,7 @@ name: Release
 
 permissions:
   contents: write
+  id-token: write
 
 on:
   push:
@@ -37,6 +38,6 @@ jobs:
       - name: Publish to npm
         run: |
           npm config set //registry.npmjs.org/:_authToken=$NPM_TOKEN
-          npm publish
+          npm publish --provenance
         env:
           NPM_TOKEN: ${{secrets.NPM_TOKEN}}
\ No newline at end of file