diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 976fc4b0f5..18fa956536 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -34,6 +34,8 @@ jobs:
       # make extra sure this publish wouldn’t break anything
       - run: yarn run build check test
 
+      - run: cp internals/scripts/source/npmrc-template ./.npmrc
+
       - name: publish
         run: bun internals/scripts/source/publish.ts
         env:
diff --git a/internals/scripts/source/npmrc-template b/internals/scripts/source/npmrc-template
new file mode 100644
index 0000000000..f3b1a9fcbc
--- /dev/null
+++ b/internals/scripts/source/npmrc-template
@@ -0,0 +1 @@
+//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}