diff --git a/workflow-templates/release.yml b/workflow-templates/release.yml
index b9d2491..a29bec5 100644
--- a/workflow-templates/release.yml
+++ b/workflow-templates/release.yml
@@ -1,10 +1,10 @@
 name: Release
 on:
   push: { tags: "v[0-9]+.[0-9]+.[0-9]+*" }
-
-permissions: read-all
+permissions: {}
 
 jobs:
-  github:
-    permissions: { contents: write }
+  release:
+    permissions: {contents: write, id-token: write}
     uses: nodenv/.github/.github/workflows/release.yml@v4
+    secrets: inherit