diff --git a/.github/workflows/web-ci.yml b/.github/workflows/web-ci.yml
index 2393d2a..0347ef9 100644
--- a/.github/workflows/web-ci.yml
+++ b/.github/workflows/web-ci.yml
@@ -9,6 +9,9 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     steps:
       - uses: actions/checkout@v4
 
@@ -18,10 +21,14 @@ jobs:
           node-version: '20'
           cache: 'npm'
           cache-dependency-path: client/web/react/package-lock.json
+          registry-url: 'https://npm.pkg.github.com/'
+          scope: '@googlemaps'
 
       - name: Install dependencies
         run: npm ci
         working-directory: client/web/react
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Type check
         run: npx tsc --noEmit