diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index 07200f5ae..1403cd734 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -23,6 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    environment: ${{ github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel' && 'update-dependencies-workflow' || '' }}
     steps:
 
     # we use this step to grab a Github App auth token, so that PRs generated by this workflow