diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 4f80f8085d..42bf8056d9 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -54,6 +54,7 @@ jobs:
     permissions:
       # Required for OIDC token exchange
       id-token: write
+    environment: publish
     steps:
       - uses: actions/checkout@v5
       - name: Install Rust (rustup)