diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index 72a3a3c32..edb3c6ef7 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -9,13 +9,15 @@ name: on-merge
 
 on:
   push:
-    branches: [ master, main ]
+    branches:
+      - main
 
 permissions:
   contents: read
 
 jobs:
   build:
+    environment: publish
     runs-on: ubuntu-latest
 
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f5c1a2e74..7359285d0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 
 jobs:
   release-please:
+    environment: publish
     permissions:
       contents: write  # for google-github-actions/release-please-action to create release commit
       pull-requests: write  # for google-github-actions/release-please-action to create release PR