diff --git a/.github/workflows/publish-alpha.yml b/.github/workflows/publish-alpha.yml
index 3cb43f076..ae5634f37 100644
--- a/.github/workflows/publish-alpha.yml
+++ b/.github/workflows/publish-alpha.yml
@@ -16,6 +16,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
     steps:
       - uses: actions/checkout@v3
         with:
diff --git a/.github/workflows/publish-packages.yml b/.github/workflows/publish-packages.yml
index d40d0068c..79f201716 100644
--- a/.github/workflows/publish-packages.yml
+++ b/.github/workflows/publish-packages.yml
@@ -9,6 +9,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v3
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..16919e786
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+provenance=true
\ No newline at end of file