From f4362d1a84717d94d75b0a965dc951ec6af1de17 Mon Sep 17 00:00:00 2001
From: Theo Buehler <tb@openbsd.org>
Date: Tue, 12 May 2026 09:09:59 +0200
Subject: CI: prepare move of COVERITY_SCAN_TOKEN to environment

There is no need for this to be a repository secret as only the coverity
workflow needs this.
---
 .github/workflows/coverity.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 09ab124..556dd43 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -13,6 +13,9 @@ concurrency:
 jobs:
   scan:
     name: "Scan"
+    environment:
+      name: "coverity"
+      deployment: false
     runs-on: "ubuntu-24.04"
     if: github.repository_owner == 'libressl' # Prevent running on forks
     permissions:
-- 
cgit v1.2.3-55-g6feb