diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 4bfa2cc..c146560 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -10,13 +10,13 @@ on:
       - main
 
 jobs:
-
   release-plz-release:
     name: Release-plz release
     runs-on: ubuntu-latest
     environment: Cargo
     permissions:
       contents: write
+      id-token: write # required for crates.io OIDC token exchange
     steps:
       - name: Generate GitHub token
         uses: actions/create-github-app-token@v2
@@ -37,12 +37,10 @@ jobs:
           command: release
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
 
   release-plz-pr:
     name: Release-plz PR
     runs-on: ubuntu-latest
-    environment: Cargo
     permissions:
       contents: write
       pull-requests: write
@@ -69,4 +67,3 @@ jobs:
           command: release-pr
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}