diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1b4085f..e06f8ae 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,6 +10,7 @@ env:
   FORCE_COLOR: 3
 permissions:
   contents: read
+  id-token: write
 jobs:
   release:
     name: Release
diff --git a/package.json b/package.json
index 8b0baf0..c63f627 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,8 @@
     "./reporters/mocha.js": "./src/reporters/mocha.cjs"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "license-check": "d2l-license-checker -p",