diff --git a/.github/workflows/build-test-publish.yml b/.github/workflows/build-test-publish.yml
index 8deb6a9..4c4b2b9 100644
--- a/.github/workflows/build-test-publish.yml
+++ b/.github/workflows/build-test-publish.yml
@@ -2,12 +2,6 @@ name: "build-test-publish"
 
 on: [push, pull_request]
 
-environment:
-  name: pypi
-  url: https://pypi.org/p/itk-dreg
-permissions:
-  id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
-
 jobs:
   build_wheel:
     name: Build Python wheels
@@ -69,6 +63,12 @@ jobs:
       - pytest
     runs-on: ubuntu-22.04
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
+    environment:
+      name: pypi
+      url: https://pypi.org/p/itk-dreg
+    permissions:
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
+
     steps:
       - name: Download Python Wheel Artifact
         uses: actions/download-artifact@v4