diff --git a/.github/workflows/delete-packages-and-releases.yml b/.github/workflows/delete-packages-and-releases.yml
index b1c57c28..e0f97555 100644
--- a/.github/workflows/delete-packages-and-releases.yml
+++ b/.github/workflows/delete-packages-and-releases.yml
@@ -23,6 +23,7 @@ permissions:
 jobs:
   delete:
     name: Delete packages and releases
+    environment: release
     permissions:
       contents: write  # for gh release delete and tag cleanup
       packages: write  # for deleting npm package versions
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 310db7e1..99e149fd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -63,6 +63,7 @@ jobs:
     if: inputs.dev == true
   release:
     name: Release
+    environment: release
     permissions:
       id-token: write  # allows this job to request a GitHub OIDC token
       contents: write  # for git tag push and creating the GitHub release