diff --git a/.github/workflows/__call-docker.yml b/.github/workflows/__call-docker.yml
index 496ba9c0..55af9708 100644
--- a/.github/workflows/__call-docker.yml
+++ b/.github/workflows/__call-docker.yml
@@ -128,6 +128,9 @@ jobs:
       contents: read
       packages: write
     runs-on: ubuntu-22.04
+    environment:
+      name: docker-${{ matrix.tag }}
+      url: https://hub.docker.com/r/${{ needs.check_dockerfiles.outputs.base_tag }}/tags?name=-${{ matrix.tag }}
     strategy:
       fail-fast: false
       matrix: ${{ fromJson(needs.check_dockerfiles.outputs.matrix) }}
diff --git a/.github/workflows/__call-release-notifier.yml b/.github/workflows/__call-release-notifier.yml
index 6e6ab17c..b2884671 100644
--- a/.github/workflows/__call-release-notifier.yml
+++ b/.github/workflows/__call-release-notifier.yml
@@ -21,6 +21,11 @@ jobs:
     name: Update blog
     if: github.repository_owner == 'LizardByte'
     runs-on: ubuntu-latest
+    environment:
+      name: release-announcement
+      url: ${{ steps.create-pr.outputs.pull-request-url }}
+    env:
+      BLOG_REPO: ${{ github.repository_owner }}/${{ github.repository_owner }}.github.io
     steps:
       - name: Check topics
         env:
@@ -62,7 +67,7 @@ jobs:
           steps.check-release.outputs.isLatestRelease == 'true'
         uses: actions/checkout@v5
         with:
-          repository: "LizardByte/LizardByte.github.io"
+          repository: ${{ env.BLOG_REPO }}
 
       - name: Create blog post
         if: >-
diff --git a/.github/workflows/__call-update-changelog.yml b/.github/workflows/__call-update-changelog.yml
index ef673983..2e761bb4 100644
--- a/.github/workflows/__call-update-changelog.yml
+++ b/.github/workflows/__call-update-changelog.yml
@@ -16,10 +16,16 @@ jobs:
   update-changelog:
     name: Update Changelog
     runs-on: ubuntu-latest
+    environment:
+      name: changelog
+      url: ${{ github.event.repository.html_url }}/blob/${{ env.CHANGELOG_BRANCH }}/${{ env.CHANGELOG_FILE }}
+    env:
+      CHANGELOG_BRANCH: changelog
+      CHANGELOG_FILE: CHANGELOG.md
     steps:
       - name: Update Changelog
         uses: LizardByte/actions/actions/release_changelog@v2025.917.25039
         with:
-          changelogBranch: changelog
-          changelogFile: CHANGELOG.md
+          changelogBranch: ${{ env.CHANGELOG_BRANCH }}
+          changelogFile: ${{ env.CHANGELOG_FILE }}
           token: ${{ secrets.GH_TOKEN }}
diff --git a/.github/workflows/__call-update-docs.yml b/.github/workflows/__call-update-docs.yml
index f5a818ed..4814f989 100644
--- a/.github/workflows/__call-update-docs.yml
+++ b/.github/workflows/__call-update-docs.yml
@@ -17,6 +17,9 @@ on:
 
 jobs:
   update-docs:
+    environment:
+      name: ReadTheDocs
+      url: https://${{ steps.get_slug.outputs.RTD_SLUG }}.readthedocs.io//latest
     env:
       RTD_SLUG: ${{ inputs.READTHEDOCS_SLUG }}
       RTD_TOKEN: ${{ secrets.READTHEDOCS_TOKEN }}
@@ -26,12 +29,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get RTD_SLUG
+        id: get_slug
         run: |
           # if the RTD_SLUG is not set, use the repository name in lowercase
           if [ -z "${RTD_SLUG}" ]; then
               RTD_SLUG=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]')
           fi
           echo "RTD_SLUG=${RTD_SLUG}" >> "${GITHUB_ENV}"
+          echo "RTD_SLUG=${RTD_SLUG}" >> "${GITHUB_OUTPUTS}"
 
       - name: Deactivate deleted release
         if: >-
diff --git a/.github/workflows/__call-update-flathub-repo.yml b/.github/workflows/__call-update-flathub-repo.yml
index 00dd08e7..f45433b8 100644
--- a/.github/workflows/__call-update-flathub-repo.yml
+++ b/.github/workflows/__call-update-flathub-repo.yml
@@ -18,6 +18,9 @@ on:
 
 jobs:
   update-flathub-repo:
+    environment:
+      name: Flathub
+      url: ${{ steps.create-pr.outputs.pull-request-url }}
     env:
       FLATHUB_PKG: dev.lizardbyte.app.${{ github.event.repository.name }}
     runs-on: ubuntu-latest
diff --git a/.github/workflows/__call-update-homebrew-repo.yml b/.github/workflows/__call-update-homebrew-repo.yml
index 4f8786f5..358c283d 100644
--- a/.github/workflows/__call-update-homebrew-repo.yml
+++ b/.github/workflows/__call-update-homebrew-repo.yml
@@ -19,6 +19,9 @@ on:
 jobs:
   update-homebrew-repo:
     runs-on: ubuntu-latest
+    environment:
+      name: Homebrew
+      url: https://github.com/${{ github.repository_owner }}/homebrew-homebrew/commits
     steps:
       - name: Check if Homebrew repo
         id: check-label
diff --git a/.github/workflows/__call-update-pacman-repo.yml b/.github/workflows/__call-update-pacman-repo.yml
index 9ecccdf3..9f992c4d 100644
--- a/.github/workflows/__call-update-pacman-repo.yml
+++ b/.github/workflows/__call-update-pacman-repo.yml
@@ -19,6 +19,11 @@ on:
 jobs:
   update-homebrew-release:
     runs-on: ubuntu-latest
+    environment:
+      name: pacman-repo
+      url: ${{ steps.create-pr.outputs.pull-request-url }}
+    env:
+      PACMAN_REPO: ${{ github.repository_owner }}/pacman-repo
     steps:
       - name: Check if pacman repo
         id: check-label
@@ -61,7 +66,7 @@ jobs:
           steps.check-release.outputs.isLatestRelease == 'true'
         uses: actions/checkout@v5
         with:
-          repository: ${{ github.repository_owner }}/pacman-repo
+          repository: ${{ env.PACMAN_REPO }}
 
       - name: Prep
         id: prep
diff --git a/.github/workflows/__call-update-winget-repo.yml b/.github/workflows/__call-update-winget-repo.yml
index bc4dd69b..1ff9fd6e 100644
--- a/.github/workflows/__call-update-winget-repo.yml
+++ b/.github/workflows/__call-update-winget-repo.yml
@@ -21,6 +21,9 @@ on:
 jobs:
   update-winget-repo:
     runs-on: ubuntu-latest
+    environment:
+      name: Winget
+      url: https://github.com/microsoft/winget-pkgs/issues?q=is%3Apr%20author%3A${{ vars.GH_BOT_NAME }}
     steps:
       - name: Check if Winget repo
         id: check-label
@@ -57,6 +60,7 @@ jobs:
           extract: false
 
       - name: Release to WinGet
+        id: winget
         if: >-
           steps.check-label.outputs.hasTopic == 'true' &&
           fromJson(steps.download.outputs.downloaded_files)[0]
diff --git a/.github/workflows/__cla-gist-replicator.yml b/.github/workflows/__cla-gist-replicator.yml
index 3a360e3c..afab2e39 100644
--- a/.github/workflows/__cla-gist-replicator.yml
+++ b/.github/workflows/__cla-gist-replicator.yml
@@ -18,6 +18,9 @@ jobs:
   replicate_cla:
     name: Replicate CLA
     runs-on: ubuntu-latest
+    environment:
+      name: cla-gist
+      url: https://gist.github.com/${{ vars.CLA_GIST_ID }}
     strategy:  # the action doesn't currently support multiple files
       fail-fast: true  # false to run all, true to fail entire job if any fail
       max-parallel: 1  # let's update files one by one to avoid complications
@@ -34,6 +37,6 @@ jobs:
         uses: exuanbo/actions-deploy-gist@v1
         with:
           token: ${{ secrets.GH_BOT_TOKEN }}
-          gist_id: ${{ secrets.CLA_GIST_ID }}
+          gist_id: ${{ vars.CLA_GIST_ID }}
           file_path: ${{ matrix.file_path }}
           file_type: text