diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9d5a67f6e..200d26f7f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -16,6 +16,9 @@ jobs:
   publish:
     name: Publish
     runs-on: ubuntu-latest
+    permissions:
+     contents: write
+     id-token: write
     steps:
     - name: Checkout
       uses: actions/checkout@v3
@@ -41,6 +44,8 @@ jobs:
       uses: actions/setup-node@v3
       with:
         node-version: 16
+    - name: install npm@9
+      run: npm i -g npm@9
     - name: install pnpm@7.24.2
       run: npm i -g pnpm@7.24.2
     - name: Install
diff --git a/.npmrc b/.npmrc
index 66704b388..e56ccb602 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1,3 +1,4 @@
+provenance=true
 save-exact=true
 hoist-pattern[]=!"**/@types/**"
 hoist-pattern[]=!"**/typedoc"
diff --git a/utils/publish.sh b/utils/publish.sh
index 13fabeccb..e4ebc7ffc 100755
--- a/utils/publish.sh
+++ b/utils/publish.sh
@@ -13,6 +13,7 @@ fi
 echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
 
 echo "Logged in to npm as: $(npm whoami)"
+echo "Version of npm is: $(npm --version)"
 
 dist_tag=""
 tag="$(git describe --tags --exact-match 2> /dev/null || :)"