diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4cd74949..6e54ca5e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,6 +9,8 @@ jobs:
     runs-on: ubuntu-latest
 
     name: "Publish to PyPI"
+    permissions:
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
 
     steps:
       - uses: actions/checkout@v3
@@ -21,5 +23,3 @@ jobs:
         run: python -m build
       - name: Publish distribution 📦 to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}