diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index cb2a5e0..09b6c05 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -8,6 +8,9 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     container:
       image: node:20
     steps:
@@ -28,8 +31,6 @@ jobs:
         run: |
           pnpm install --ignore-scripts --prefer-offline
           npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build Changelog
         id: build_changelog
         uses: mikepenz/release-changelog-builder-action@v5