diff --git a/.github/workflows/npm-pub.yml b/.github/workflows/npm-pub.yml
index 55d453f..38c7b5e 100644
--- a/.github/workflows/npm-pub.yml
+++ b/.github/workflows/npm-pub.yml
@@ -11,6 +11,9 @@ jobs:
   eslint-config:
     name: 'Publish eslint-config to npm'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     if: contains(github.ref_name, 'eslint-config@')
     steps:
       - name: 'Checkout'
@@ -32,6 +35,9 @@ jobs:
   prettier-config:
     name: 'Publish prettier-config to npm'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     if: contains(github.ref_name, 'prettier-config@')
     steps:
       - name: 'Checkout'
diff --git a/npm/eslint-config/package.json b/npm/eslint-config/package.json
index 6e6bc6a..6b509b0 100644
--- a/npm/eslint-config/package.json
+++ b/npm/eslint-config/package.json
@@ -23,7 +23,7 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/revi/sandbox.git",
+    "url": "git+https://github.com/revi/sandbox.git",
     "directory": "npm/eslint-config"
   },
   "author": {
diff --git a/npm/prettier-config/package.json b/npm/prettier-config/package.json
index 19e1258..eba5ba5 100644
--- a/npm/prettier-config/package.json
+++ b/npm/prettier-config/package.json
@@ -20,7 +20,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/revi/sandbox.git",
+    "url": "git+https://github.com/revi/sandbox.git",
     "directory": "npm/prettier-config"
   },
   "bugs": {