diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b91e65c..18c2f1d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,5 +1,7 @@
 name: Publish to PyPI
 
+concurrency: release
+
 on:
   release:
     types: [published]
@@ -8,6 +10,9 @@ jobs:
   publish:
     name: Publish
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repository
         uses: actions/checkout@v4