diff --git a/.github/workflows/issueauto.yml b/.github/workflows/issueauto.yml
index 40c4b36e7..cfdcff764 100644
--- a/.github/workflows/issueauto.yml
+++ b/.github/workflows/issueauto.yml
@@ -10,6 +10,7 @@ permissions:
 jobs:
   issue-auto:
     runs-on: ubuntu-latest
+    environment: cli-automation
     steps:
       - name: label incoming issue
         env:
diff --git a/.github/workflows/prauto.yml b/.github/workflows/prauto.yml
index b7ed90183..40dfee846 100644
--- a/.github/workflows/prauto.yml
+++ b/.github/workflows/prauto.yml
@@ -11,6 +11,7 @@ permissions:
 jobs:
   pr-auto:
     runs-on: ubuntu-latest
+    environment: cli-automation
     steps:
       - name: lint pr
         env:
diff --git a/.github/workflows/triage.yml b/.github/workflows/triage.yml
index 849beebad..3ed27a5f2 100644
--- a/.github/workflows/triage.yml
+++ b/.github/workflows/triage.yml
@@ -11,6 +11,7 @@ env:
   TARGET_REPO: github/cli
 jobs:
   issue:
+    environment: cli-discuss-automation
     runs-on: ubuntu-latest
     if: github.event_name == 'issues' && github.event.action == 'labeled' && github.event.label.name == 'discuss'
     steps:
@@ -42,6 +43,7 @@ jobs:
 
   pull_request:
     runs-on: ubuntu-latest
+    environment: cli-discuss-automation
     if: github.event_name == 'pull_request_target' && github.event.action == 'labeled' && github.event.label.name == 'discuss'
     steps:
       - name: Create issue based on source pull request