diff --git a/.github/workflows/release-rancher-components.yml b/.github/workflows/release-rancher-components.yml
index 9f0904b36d0..0c98efd1b95 100644
--- a/.github/workflows/release-rancher-components.yml
+++ b/.github/workflows/release-rancher-components.yml
@@ -5,13 +5,14 @@ on:
     tags:
         - 'components-v*'
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build:
     if: ${{ github.repository_owner == 'rancher' }}
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
     steps:
     - uses: actions/checkout@v6
       with:
@@ -46,5 +47,3 @@ jobs:
         else
           yarn publish:lib
         fi
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}