Remove secrets-outside-env disable, add environment to jobs that use secrets

Made-with: Cursor

Author: adamtheturtle

.github/workflows/release.yml

@@ -7,6 +7,7 @@ jobs:
   release:
     name: Create release
     runs-on: ubuntu-latest
+    environment: release
 
     permissions:
       # This is needed for https://github.com/stefanzweifel/git-auto-commit-action.
@@ -138,6 +139,7 @@ jobs:
     name: Publish Docker images
     needs: release
     runs-on: ubuntu-latest
+    environment: dockerhub
 
     permissions: {}
 

.github/workflows/test.yml

@@ -22,6 +22,7 @@ jobs:
   # CI tests with matrix
   ci-tests:
     runs-on: ubuntu-latest
+    environment: vuforia
     strategy:
       fail-fast: false
       matrix:

zizmor.yml

@@ -10,7 +10,5 @@ rules:
     disable: true
   superfluous-actions:
     disable: true
-  secrets-outside-env:
-    disable: true
   template-injection:
     disable: true