diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 8f34d6744..d2c556ec4 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -17,6 +17,6 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
       - run: npm install
       - run: npm run build && npm run publish:prepare
-      - run: cd bundle && npm publish
+      - run: cd bundle && npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}