diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9ee6285..4958db9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -38,6 +38,14 @@ jobs:
   publish:
     needs: test
     runs-on: ubuntu-latest
+    # Publishing to the Marketplace waits for an approval. The environment also
+    # restricts what may deploy to it to `v*` tags, which is the ref every
+    # release this workflow has ever run on.
+    #
+    # `VSCE_PAT` is still a repository secret, so this gates *when* it is used,
+    # not who can reference it. Moving the secret onto this environment is the
+    # step that would do that, and needs the token value.
+    environment: marketplace-publish
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1