Use protected environment for publishing secrets (#485)

trask · web-flow · commit 8a9d6dcc7fd4 · 2026-05-23T19:56:54.000-07:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
   release:
+    environment: protected
     permissions:
       contents: write # for creating the release
     runs-on: ubuntu-latest
