diff --git a/.github/workflows/update_report_snapshot.yaml b/.github/workflows/update_report_snapshot.yaml
index 61a2c117..c144da58 100644
--- a/.github/workflows/update_report_snapshot.yaml
+++ b/.github/workflows/update_report_snapshot.yaml
@@ -1,4 +1,6 @@
 name: Update Report Snapshot
+env:
+  REPORT_GITHUB_TOKEN: ${{ secrets.REPORT_GITHUB_TOKEN }}
 
 on:
   push:
@@ -8,16 +10,20 @@ on:
     - cron: '0 0 * * 1'
 
 jobs:
-  Deploy-Production:
+  default:
     runs-on: ubuntu-latest
+    environment: production
+    permissions:
+      pull-requests: write # open PR
+      contents: write # update snapshots
+
     steps:
       - uses: actions/checkout@v3
         with:
           repository: WhiteMinds/neuron-troubleshooting
           ref: feat/338_WeeklyReportScript
+
       - name: report:update
-        env:
-          REPORT_GITHUB_TOKEN: ${{ secrets.REPORT_GITHUB_TOKEN }}
         run: |
           yarn install
           yarn workspace @magickbase-website/scripts report:update