diff --git a/.changeset/light-impalas-argue.md b/.changeset/light-impalas-argue.md
new file mode 100644
index 0000000..b284e84
--- /dev/null
+++ b/.changeset/light-impalas-argue.md
@@ -0,0 +1,5 @@
+---
+"wpgraphql-ide": patch
+---
+
+chore: set workflow environment
diff --git a/.github/workflows/deploy-to-wordpress.org.yml b/.github/workflows/deploy-to-wordpress.org.yml
index 8dcee29..204dead 100644
--- a/.github/workflows/deploy-to-wordpress.org.yml
+++ b/.github/workflows/deploy-to-wordpress.org.yml
@@ -8,6 +8,7 @@ jobs:
   tag:
     name: New tag
     runs-on: ubuntu-latest
+    environment: actions # Environment Secrets are scoped inside of the "actions" environment.
     steps:
     - uses: actions/checkout@master
     - name: WordPress Plugin Deploy