diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b056b3b..78aaee0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -154,6 +154,9 @@ jobs:
     name: Deploy packages
     runs-on: ubuntu-latest
     needs: test-wheels
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - name: Setup Python ${{ matrix.python-version }}
@@ -190,14 +193,8 @@ jobs:
 
       - name: Upload packages to testpypi
         if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_TEST_TOKEN_NAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_TEST_API_TOKEN }}
         run: python -m twine upload --skip-existing --repository testpypi dist/* --verbose
 
       - name: Upload packages to pypi
         if: startsWith(github.ref, 'refs/tags/')
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_PROD_TOKEN_NAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PROD_API_TOKEN }}
         run: python -m twine upload --skip-existing dist/* --verbose