diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b8c285a85..b9c465612 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -43,6 +43,8 @@ jobs:
       - name: Publish to npm (next)
         if: inputs.action == 'publish-next'
         run: bun run publish:next
+        env:
+          NPM_CONFIG_PROVENANCE: true
 
       - name: Promote to latest
         if: inputs.action == 'promote-latest'