diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index cec8f048..bf4a66bc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,6 +8,10 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     steps:
       - uses: actions/checkout@v2
 
@@ -20,6 +24,8 @@ jobs:
         run: flutter --disable-telemetry
 
       - name: Publish to pub.dev
-        run: flutter pub publish --force
         env:
           PUB_ACCESS_TOKEN: ${{ secrets.PUB_ACCESS_TOKEN }}
+        run: |
+          echo 'PUB_ACCESS_TOKEN=$PUB_ACCESS_TOKEN' > $HOME/.pub-cache/credentials.json
+          flutter pub publish --force