diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 51c9118..d9890c4 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -7,6 +7,9 @@ on:
 jobs:
     publish-npm:
         runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            id-token: write
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v4