diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0f3bbd6..5ada215 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,6 +1,8 @@
 name: publish to PyPI 🐍
 
-on: release
+on:
+  release:
+    types: [published]
 
 jobs:
   pypi-publish:
@@ -11,6 +13,7 @@ jobs:
     permissions:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python