diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5494df5f..63b9177e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,6 +10,8 @@ jobs:
       group: npm-deploy
     environment:
       name: release
+    permissions:
+      id-token: write
     steps:
       - name: Load secret
         uses: 1password/load-secrets-action@581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0
diff --git a/package.json b/package.json
index fe069a38..cf486e35 100644
--- a/package.json
+++ b/package.json
@@ -29,6 +29,10 @@
     "lint": "tsdx lint src test",
     "prepublishOnly": "yarn test && yarn build"
   },
+  {
+    "access": "public",
+    "provenance": true
+  },
   "peerDependencies": {},
   "husky": {
     "hooks": {