diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index e446886..0a875a7 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -64,6 +64,7 @@ jobs:
         runs-on: ubuntu-latest
         permissions:
             contents: read
+            id-token: write
             packages: write
         steps:
             - name: Check out repo
@@ -89,4 +90,4 @@ jobs:
               # Remove dev values from package.json before publishing to reduce package size
               run: |
                   npm pkg delete commitlint devDependencies jest scripts
-                  npm publish --ignore-scripts
+                  npm publish --access public --ignore-scripts --provenance