From 883004e931a9ab0b29e60f95bfbde88f89e5a389 Mon Sep 17 00:00:00 2001
From: Michele Wyss <michele.wyss@sap.com>
Date: Fri, 5 Jun 2026 14:10:56 +0200
Subject: [PATCH] Scope secrets to github env

---
 .github/workflows/ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6fb30b7..ec51762 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,6 +33,7 @@ jobs:
   system-tests:
     name: System Tests
     runs-on: windows-latest
+    environment: system-tests
     needs: [tests,lint]
     if: github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/rel/'))
     permissions: