diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d2da55994..0a74656ca 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,6 +10,11 @@ on:
 
 jobs:
   release-package:
+    permissions:
+      contents: read
+      id-token: write
+      issues: write
+
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
diff --git a/package.json b/package.json
index 177fdb791..75a0d7ba5 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "docs:build": "vitepress build docs",
     "docs:preview": "vitepress preview docs",
     "apidocs": "typedoc --excludePrivate --plugin typedoc-plugin-markdown --out docs/apidocs lib/index.ts",
-    "release": "npm run build && npm publish --access public"
+    "release": "npm run build && npm publish --provenance --access public"
   },
   "repository": {
     "type": "git",