diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 84f4cef49..47fcfcf45 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -251,8 +251,6 @@ jobs:
     if: ${{ github.event_name == 'push' && github.repository == 'jbms/sphinx-immaterial' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') }}
     runs-on: ubuntu-latest
     needs: [build, test]
-    permissions:
-      id-token: write
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -262,10 +260,15 @@ jobs:
         uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.10.3
         continue-on-error: true
         with:
+          user: __token__
+          password: ${{ secrets.pypi_test_token }}
           repository-url: https://test.pypi.org/legacy/
         if: ${{ ! startsWith(github.ref, 'refs/tags/v') }}
       - name: Publish to PyPI (main server)
         uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.10.3
+        with:
+          user: __token__
+          password: ${{ secrets.pypi_token }}
         if: ${{ startsWith(github.ref, 'refs/tags/v') }}
       - uses: actions/checkout@v4
         if: ${{ startsWith(github.ref, 'refs/tags/v') }}