diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 456b0de..5a072c3 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -17,13 +17,14 @@ jobs:
         node-version: [ 20.x, 22.x ]
 
     steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
     - name: Use Node ${{ matrix.node-version }}
       uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
-
-    - name: Checkout repository
-      uses: actions/checkout@v4
+        cache: npm
 
     - name: Clean install
       run: npm ci
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 94a6545..744620a 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -38,12 +38,16 @@ jobs:
 
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - name: Setup .npmrc file to publish to npm
+      - name: Setup node
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: '22'
+          cache: npm
       - name: Install modules
         run: npm ci
       - name: Build