diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index e85cd73..3a6940b 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -28,6 +28,8 @@ jobs:
             This is an automated release for version ${{ github.ref_name }}.
           draft: false
           prerelease: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   release-build:
     runs-on: ubuntu-latest
@@ -56,7 +58,9 @@ jobs:
     needs: release-build
     environment:
       name: release
-      url: https://pypi.org/project/ammber
+      url: https://pypi.org/p/ammber
+    permissions:
+      id-token: write
 
     steps:
       - name: Retrieve release distributions