diff --git a/.github/workflows/npm-cd-latest.yml b/.github/workflows/npm-cd-latest.yml
index 105791d..4afc2b1 100644
--- a/.github/workflows/npm-cd-latest.yml
+++ b/.github/workflows/npm-cd-latest.yml
@@ -3,6 +3,10 @@ on:
   push:
     tags: 
       - "5.[0-9]+.[0-9]+"
+
+permissions:
+  id-token: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -24,5 +28,3 @@ jobs:
       - run: yarn test --coverage
       - run: yarn build --provenance --access public
       - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}