diff --git a/.changeset/slimy-trains-wink.md b/.changeset/slimy-trains-wink.md
new file mode 100644
index 0000000..deaa214
--- /dev/null
+++ b/.changeset/slimy-trains-wink.md
@@ -0,0 +1,5 @@
+---
+'wonka': patch
+---
+
+Publish with npm provenance
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9c29fd2..033babb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,14 @@ jobs:
     name: Release
     runs-on: ubuntu-20.04
     timeout-minutes: 20
+    permissions:
+      contents: write
+      id-token: write
+      issues: write
+      repository-projects: write
+      deployments: write
+      packages: write
+      pull-requests: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v3
@@ -22,7 +30,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v2.2.2
         with:
-          version: 7
+          version: 8
           run_install: false
 
       - name: Get pnpm store directory
diff --git a/package.json b/package.json
index 5201e21..bc72275 100644
--- a/package.json
+++ b/package.json
@@ -71,6 +71,9 @@
       "./scripts/eslint-preset.js"
     ]
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "devDependencies": {
     "@changesets/cli": "^2.26.0",
     "@changesets/get-github-info": "0.5.0",