diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0f3bbd6..8628f55 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,6 +2,9 @@ name: publish to PyPI 🐍
 
 on: release
 
+permissions:
+  contents: read
+
 jobs:
   pypi-publish:
     name: upload release to PyPI
@@ -21,5 +24,5 @@ jobs:
         uses: snok/install-poetry@v1
       - name: build package distributions
         run: poetry build
-      - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+#      - name: Publish package distributions to PyPI
+#        uses: pypa/gh-action-pypi-publish@release/v1