diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 9612b5beaf..8dfbaebd6b 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -55,6 +55,7 @@ jobs:
   Release:
     permissions:
       contents: write
+      id-token: write
     needs: [UnitTests, OtherTests]
     if: |
       github.ref == 'refs/heads/master' &&
diff --git a/package.json b/package.json
index 3c60ecfa3c..dc8b93def6 100644
--- a/package.json
+++ b/package.json
@@ -33,6 +33,9 @@
     "./marked.min.js": "./marked.min.js",
     "./package.json": "./package.json"
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "repository": "git://github.com/markedjs/marked.git",
   "homepage": "https://marked.js.org",
   "bugs": {