diff --git a/.github/workflows/analyze-changes.yaml b/.github/workflows/analyze-changes.yaml
index 89c3763c447..442c4cb05b9 100644
--- a/.github/workflows/analyze-changes.yaml
+++ b/.github/workflows/analyze-changes.yaml
@@ -48,6 +48,8 @@ jobs:
   trivy:
     name: Analyze changes with Trivy
     runs-on: ubuntu-latest
+    environment:
+      name: protected-main-env
     permissions:
       actions: read
       contents: read