diff --git a/.github/workflows/release_pypi_after_merge.yml b/.github/workflows/release_pypi_after_merge.yml
index 6cef8a4b7..e41bc0544 100644
--- a/.github/workflows/release_pypi_after_merge.yml
+++ b/.github/workflows/release_pypi_after_merge.yml
@@ -7,12 +7,14 @@ on:
       - 'version.txt'
     types:
       - closed
-
+permissions:
+  id-token: write
+  contents: read
 jobs:
   build-n-publish:
     if: github.event_name == 'workflow_dispatch' || github.repository == 'hpcaitech/ColossalAI' && github.event.pull_request.merged == true && github.base_ref == 'main'
     name: Build and publish Python 🐍 distributions 📦 to PyPI
-    runs-on: ubuntu-[self-hosted, ubuntu-latest]
+    runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
     - uses: actions/checkout@v2
@@ -35,7 +37,7 @@ jobs:
   notify:
     name: Notify Lark via webhook
     needs: build-n-publish
-    runs-on: [self-hosted, ubuntu-latest]
+    runs-on: ubuntu-latest
     if: ${{ always() }}
     steps:
       - uses: actions/checkout@v2