@@ -9,6 +9,7 @@ jobs:
     # Run on any merged PR (not just first-time contributors)
     if: github.event.pull_request.merged == true
     runs-on: ubuntu-latest
+    environment: GIST_PAT  # Use environment secret
     outputs:
       lines_changed: ${{ steps.calc.outputs.lines_changed }}
     steps: