diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 2181973..9b113cb 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -5,6 +5,9 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
     - uses: actions/checkout@v3
     - uses: actions/setup-node@v3
@@ -18,6 +21,6 @@ jobs:
     - name: Build
       run: npm run build
     - name: Publish
-      run: npm publish
+      run: npm publish --provenance --access public
       env:
         NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
\ No newline at end of file
diff --git a/package.json b/package.json
index 7fad29d..14de174 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "aigc-detector",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Detect if content is generated by AI",
   "keywords": [
     "aigc",