diff --git a/.github/workflows/safe-settings.yml b/.github/workflows/safe-settings.yml
index 0b68ad2..1b763bf 100644
--- a/.github/workflows/safe-settings.yml
+++ b/.github/workflows/safe-settings.yml
@@ -15,6 +15,7 @@ jobs:
     permissions:
       contents: read
     runs-on: ubuntu-24.04
+    environment: ${{ github.ref_name == github.event.repository.default_branch && 'production' || 'test' }}
     env:
       # Version/tag of `github/safe-settings` repository to use:
       SAFE_SETTINGS_VERSION: ff7a65655d33006b9820479df0a9e1057a8927e4 # 2.1.17