diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a4b14ca..4aca9a3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
       contents: write # to create a GitHub Release
       issues: write # to comment on issues included in a release
       pull-requests: write # to comment on Pull Requests included in a release
+      id-token: write # to generate npm provenance statements
     steps:
       - name: Checkout
         uses: actions/checkout@v4
diff --git a/package.json b/package.json
index 885a454..9120487 100644
--- a/package.json
+++ b/package.json
@@ -35,6 +35,9 @@
     "prepublishOnly": "rollup -c",
     "test": "mocha --timeout 10000"
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "dependencies": {
     "ansi-regex": "^6.0.1",
     "chalk": "^5.0.0",