diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9db4deef..b823239c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -124,10 +124,8 @@ jobs:
         working-directory: sass-spec
 
   deploy_npm:
-    name: Deploy npm
-    runs-on: ubuntu-latest
-    if: "github.ref_type == 'tag' && github.event.repository.fork == false"
     needs: [static_analysis, tests, sass_spec]
+    if: "github.ref_type == 'tag' && github.event.repository.fork == false"
     permissions:
       attestations: write
       contents: write
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8fb2d1cc..f132175a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,6 +28,6 @@ jobs:
 
       - name: Publish optional dependencies
         run: |
-          find ./npm -mindepth 1 -maxdepth 1 -print0 | xargs -0 -n 1 -- sh -xc 'npx ts-node ./tool/prepare-optional-release.ts --package=$(basename $1) && npm publish $1' --
+          find ./npm -mindepth 1 -maxdepth 1 -print0 | xargs -0 -n 1 -- sh -xc 'npx ts-node ./tool/prepare-optional-release.ts --package=$(basename $1) && npm publish --provenance $1' --
 
-      - run: npm publish
+      - run: npm publish --provenance