diff --git a/.github/workflows/pythonpackage.yml b/.github/workflows/pythonpackage.yml
index b4412ac..5178511 100644
--- a/.github/workflows/pythonpackage.yml
+++ b/.github/workflows/pythonpackage.yml
@@ -108,6 +108,7 @@ jobs:
     permissions:
       id-token: write
     if: github.repository_owner == 'nipype' && github.event.action == 'published'
+    environment: Publish
     steps:
       - uses: actions/download-artifact@v4
         with: