diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 58b7ebe1..77d6dbdf 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -48,6 +48,13 @@ jobs:
     needs: check
     if: needs.check.outputs.VERSION_EXISTS == 'false'
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: package.json
+          registry-url: "https://registry.npmjs.org"
+          cache: "npm"
       - name: Build package
         run: |
           npm ci