diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index adf84932c..36bf4ccea 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -11,7 +11,9 @@ on:
 jobs:
   release-plz:
     name: Release-plz
+    environment: release
     runs-on: ubuntu-latest
+    if: github.repository_owner == "gtema"
     permissions:
       id-token: write
       pull-requests: write
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cbf7142af..25bb8536c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -133,7 +133,7 @@ jobs:
         with:
           toolchain: stable
       - name: "Harden Runner"
-        uses: "step-security/harden-runner@92c522aaa6f53af082553dedc1596c80b71aba33"
+        uses: "step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2"
         with:
           "egress-policy": "audit"
       - name: Install dist