python-publish: environment

Signed-off-by: William Woodruff <william@trailofbits.com>

ci/python-publish.yml

@@ -46,6 +46,13 @@ jobs:
       # IMPORTANT: this permission is mandatory for trusted publishing
       id-token: write
 
+    # Dedicated environments with protections for publishing are strongly recommended.
+    # For more information, see: https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules
+    environment:
+      name: pypi
+      # OPTIONAL: uncomment and update to include your PyPI project URL in the deployment status:
+      # url: https://pypi.org/p/YOURPROJECT
+
     steps:
       - name: Retrieve release distributions
         uses: actions/download-artifact@v4