diff --git a/.github/workflows/release-live.yml b/.github/workflows/release-live.yml
index 63b1587..90e4e7e 100644
--- a/.github/workflows/release-live.yml
+++ b/.github/workflows/release-live.yml
@@ -11,6 +11,7 @@ permissions:
   pull-requests: write
   packages: write
   issues: write
+  id-token: write
 
 jobs:
   audit:
@@ -76,7 +77,7 @@ jobs:
       - run: npm ci --ignore-scripts
       - run: npm run release
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ""
 
   # notify_slack:
   #   needs: [audit, tests, create_release, publish_release]
diff --git a/package.json b/package.json
index 80e9cc9..34c09eb 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
         "prepack": "npm run build",
         "clean": "rm -rf dist coverage",
         "release:dev": "npm publish --tag next || (echo 'Release failed' && exit 1)",
-        "release": "npm publish --registry https://registry.npmjs.org/ --access public || (echo 'Release failed' && exit 1)"
+        "release": "npm publish --registry https://registry.npmjs.org/ --access public --provenance || (echo 'Release failed' && exit 1)"
     },
     "keywords": [
         "respondio",