diff --git a/.github/workflows/npm-publish.yaml b/.github/workflows/npm-publish.yaml
index f157de27..b9348ecc 100644
--- a/.github/workflows/npm-publish.yaml
+++ b/.github/workflows/npm-publish.yaml
@@ -8,10 +8,16 @@ on:
     tags:
       - v*
 
-
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+
+    permissions:
+      id-token: write  # Required for OIDC
+      contents: read
+
+    environment: release
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -39,5 +45,4 @@ jobs:
 
       - name: Publish
         run: pnpm publish -r --no-git-checks --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN_DLS}}
+