diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 996f6a5..e4767f2 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -5,6 +5,10 @@ on:
 jobs:
     build:
         runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            id-token: write
+
         steps:
             - uses: actions/checkout@v4
             # Setup .npmrc file to publish to npm
@@ -17,6 +21,3 @@ jobs:
             - run: npm publish --provenance --access public
               env:
                   NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-permissions:
-    id-token: write