diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index 4e7d18b..80f5013 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -16,6 +16,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   package-release:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1b12624..4b200fa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   package-release:
diff --git a/package.json b/package.json
index cae006c..731e47b 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
     "storybook": "NODE_ENV=storybook storybook dev -p 6006",
     "build-storybook": "storybook build",
     "prepare": "lefthook install",
-    "release": "bunx github:akalanka47000/bunpublish --tag=${TAG:=latest}",
+    "release": "bunx github:akalanka47000/bunpublish --tag=${TAG:=latest} --provenance",
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "keywords": [