From d346957288a5637b2bc1220c2ba476c02dcbb7d5 Mon Sep 17 00:00:00 2001
From: sayan-oai <sayan@openai.com>
Date: Thu, 14 May 2026 14:45:53 -0700
Subject: [PATCH] make rust-release-prepare use env secret (#22702)

made a `rust-release-prepare` environment with the necessary API key as
an environment secret. use this in the workflow rather than the action
secret.

once this merges and i confirm it works as intended, ill rm the action
secret.
---
 .github/workflows/rust-release-prepare.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/rust-release-prepare.yml b/.github/workflows/rust-release-prepare.yml
index e998efb54c..67e542efa9 100644
--- a/.github/workflows/rust-release-prepare.yml
+++ b/.github/workflows/rust-release-prepare.yml
@@ -16,6 +16,9 @@ jobs:
   prepare:
     # Prevent scheduled runs on forks (no secrets, wastes Actions minutes)
     if: github.repository == 'openai/codex'
+    environment:
+      name: rust-release-prepare
+      deployment: false
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2