diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b75f6af..a8ca1e7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,9 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v5
@@ -22,9 +25,5 @@ jobs:
         run: pnpm -F @vercel/analytics build
       - run: pnpm -F @vercel/analytics publish --tag beta --no-git-checks
         if: github.event.release.prerelease == true
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN_ELEVATED }}
       - run: pnpm -F @vercel/analytics publish --no-git-checks
         if: github.event.release.prerelease == false
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN_ELEVATED }}
diff --git a/packages/web/package.json b/packages/web/package.json
index 5c86daf..c820d94 100644
--- a/packages/web/package.json
+++ b/packages/web/package.json
@@ -11,6 +11,9 @@
     "directory": "packages/web"
   },
   "license": "MIT",
+  "publishConfig": {
+    "provenance": true
+  },
   "exports": {
     "./package.json": "./package.json",
     ".": {