diff --git a/.changeset/sweet-poems-smoke.md b/.changeset/sweet-poems-smoke.md
new file mode 100644
index 00000000000..a4835124ca7
--- /dev/null
+++ b/.changeset/sweet-poems-smoke.md
@@ -0,0 +1,8 @@
+---
+'@astrojs/starlight-docsearch': patch
+'@astrojs/starlight': patch
+'@astrojs/starlight-tailwind': patch
+'@astrojs/starlight-markdoc': patch
+---
+
+Publishes provenance containing verifiable data to link a package back to its source repository and the specific build instructions used to publish it.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fe406013740..eb4a7cce26a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,6 +10,9 @@ jobs:
     name: Release
     if: ${{ github.repository_owner == 'withastro' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4
diff --git a/packages/docsearch/package.json b/packages/docsearch/package.json
index 389da579097..e80bc275396 100644
--- a/packages/docsearch/package.json
+++ b/packages/docsearch/package.json
@@ -33,5 +33,8 @@
   },
   "devDependencies": {
     "@astrojs/starlight": "workspace:*"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }
diff --git a/packages/markdoc/package.json b/packages/markdoc/package.json
index 864e423d818..8c8736c3429 100644
--- a/packages/markdoc/package.json
+++ b/packages/markdoc/package.json
@@ -24,5 +24,8 @@
   "peerDependencies": {
     "@astrojs/markdoc": "^0.12.1",
     "@astrojs/starlight": ">=0.23.0"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }
diff --git a/packages/starlight/package.json b/packages/starlight/package.json
index d11144a82ed..f1ba4041d93 100644
--- a/packages/starlight/package.json
+++ b/packages/starlight/package.json
@@ -214,5 +214,8 @@
     "unified": "^11.0.5",
     "unist-util-visit": "^5.0.0",
     "vfile": "^6.0.2"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }
diff --git a/packages/tailwind/package.json b/packages/tailwind/package.json
index 845dac8e4d7..84e552d66f0 100644
--- a/packages/tailwind/package.json
+++ b/packages/tailwind/package.json
@@ -32,5 +32,8 @@
     "@astrojs/starlight": ">=0.9.0",
     "@astrojs/tailwind": "^5.1.3",
     "tailwindcss": "^3.3.3"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }