diff --git a/.changeset/fix-npm-publish.md b/.changeset/fix-npm-publish.md
new file mode 100644
index 0000000..cea05ac
--- /dev/null
+++ b/.changeset/fix-npm-publish.md
@@ -0,0 +1,5 @@
+---
+"scope3": patch
+---
+
+Fix npm Trusted Publishing by adding registry-url to setup-node in release workflow
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c88c2bf..57c1bfc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,8 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Update npm
         run: npm install -g npm@latest
diff --git a/package.json b/package.json
index a9a7adf..3fd7840 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,8 @@
     "LICENSE"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "bin": {
     "scope3": "dist/cli/index.js"