diff --git a/.github/workflows/release-management.yml b/.github/workflows/release-management.yml
index b3534faf..8647f3a3 100644
--- a/.github/workflows/release-management.yml
+++ b/.github/workflows/release-management.yml
@@ -4,6 +4,10 @@ on:
   push:
     branches: [ master ]
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   test_and_build:
     name: Test and build
@@ -102,9 +106,7 @@ jobs:
         run: npm ci
 
       - name: Publish to npm
-        run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_PUBLISH_TOKEN}}
+        run: npm publish --provenance
 
   deploy_docs:
     name: Deploy docs