diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 1aa17ddf..5d7639a4 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -7,10 +7,13 @@ on:
 
 jobs:
   release-plz-release:
+    if: ${{ github.repository_owner == 'cot-rs' }}
     name: Release-plz release
     runs-on: ubuntu-latest
+    environment: "crates.io release"
     permissions:
       contents: write
+      id-token: write
     steps:
       - name: Generate GitHub token
         uses: actions/create-github-app-token@v2
@@ -30,9 +33,9 @@ jobs:
           command: release
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
 
   release-plz-pr:
+    if: ${{ github.repository_owner == 'cot-rs' }}
     name: Release-plz PR
     runs-on: ubuntu-latest
     permissions:
@@ -60,4 +63,3 @@ jobs:
           command: release-pr
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}