diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7e2623d0..76b9f9ee 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,7 +6,7 @@ on:
       - 'v1.*.*'
 
 permissions:
-  contents: write
+  contents: read
   id-token: write
 
 jobs:
@@ -27,5 +27,3 @@ jobs:
         run: npm run build
       - name: Publish to NPM
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}