diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 088826f..a80f845 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -10,6 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     permissions:
+      contents: read
       id-token: write
     steps:
       - uses: actions/checkout@v4
@@ -31,7 +32,7 @@ jobs:
         run: npm ci --ignore-scripts --no-audit --no-fund
 
       - name: Publish package
-        run: npm publish --provenance
+        run: npm publish --provenance --access public
         working-directory: ./image-vue
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}