diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index f1ac6625..dcb0398b 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -171,6 +171,9 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     needs: [build]
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v3
@@ -178,8 +181,6 @@ jobs:
           node-version: 16
           registry-url: https://registry.npmjs.org/
       - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
 
   publish-docker:
     if: startsWith(github.ref, 'refs/tags/')