From 9d8ff015c6c25b2e22b265bec1c5857142a0ed1b Mon Sep 17 00:00:00 2001
From: Jeff Epler <jepler@gmail.com>
Date: Thu, 23 May 2024 07:27:43 -0400
Subject: [PATCH] Perform releases only within the 'release' environment

this is recommended by pypi for trusted publishers
---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0c9b446..30ad226 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
   release:
 
     runs-on: ubuntu-22.04
+    environment: release
     permissions:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write