diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b438168..14db863 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,6 +43,9 @@ jobs:
       run-tests: ${{ inputs.skip-tests == false }}
 
   release-npm:
+    permissions:
+      contents: write
+      id-token: write
     needs: build-and-test
     runs-on: ubuntu-latest
     environment: npm
@@ -77,5 +80,7 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
         run: npm publish --access public --tag ${{ inputs.prerelease == true && 'next' || 'latest' }} ${{ inputs.skip-optional-publish == true && '--ignore-scripts' || '' }}
       - name: 'Create release notes'
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         run: |
-          npx @matteo.collina/release-notes -a ${{ secrets.GITHUB_TOKEN }} -t v${{ inputs.version }} -r python-node -o platformatic ${{ inputs.prerelease == true && '-p' || '' }} -c ${{ github.ref }}
+          npx @matteo.collina/release-notes -t v${{ inputs.version }} -r python-node -o platformatic ${{ inputs.prerelease == true && '-p' || '' }} -c ${{ github.ref }}