diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a21d463..91d70b2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,6 +13,7 @@ jobs:
     name: Publish & Deploy
     permissions:
       contents: write
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - name: Check out repo
diff --git a/package.json b/package.json
index c190230..08f42c8 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,8 @@
     "npm": ">=5.5.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "skuba": {
     "entryPoint": "src/index.ts",