diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b40ca50..141b5ce 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -61,6 +61,8 @@ jobs:
 
       - name: Publish internal
         working-directory: ./js
+        env:
+          NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          echo "@caido:registry=https://npm.pkg.github.com" > .npmrc
+          mv .npmrc.github .npmrc
           pnpm -r publish --no-git-checks
diff --git a/js/.npmrc.github b/js/.npmrc.github
new file mode 100644
index 0000000..d8a031e
--- /dev/null
+++ b/js/.npmrc.github
@@ -0,0 +1,5 @@
+//npm.pkg.github.com/:_authToken=${NPM_TOKEN}
+
+@caido:registry=https://npm.pkg.github.com
+
+publish-branch=main