diff --git a/.github/workflows/scip-release.yml b/.github/workflows/scip-release.yml
index ab65d8b52..36a7ecf62 100644
--- a/.github/workflows/scip-release.yml
+++ b/.github/workflows/scip-release.yml
@@ -8,18 +8,18 @@ on:
 jobs:
   release-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write # npm trusted publishing (OIDC)
     steps:
       - uses: actions/checkout@v3
       - uses: docker/setup-buildx-action@v2
       - uses: actions/setup-node@v2
         with:
-          node-version: '16'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: 24
       - run: npm install
       - run: cd ./packages/pyright-scip/ && npm install && npm run build
       - run: cd ./packages/pyright-scip/ && npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
       - name: Login to DockerHub
         uses: docker/login-action@v2
         with: