diff --git a/.github/workflows/publish_main_snapshot.yml b/.github/workflows/publish_main_snapshot.yml
index 391e203..7d80213 100644
--- a/.github/workflows/publish_main_snapshot.yml
+++ b/.github/workflows/publish_main_snapshot.yml
@@ -9,6 +9,7 @@ permissions:
 
 jobs:
   build:
+    environment: maven-staging-publish-ungated
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin@v4
diff --git a/.github/workflows/publish_release.yml b/.github/workflows/publish_release.yml
index 1b93a56..8bd96f3 100644
--- a/.github/workflows/publish_release.yml
+++ b/.github/workflows/publish_release.yml
@@ -10,6 +10,7 @@ permissions:
 
 jobs:
   build:
+    environment: maven-prod-publishing-gated
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin@v4
diff --git a/CODEOWNERS b/CODEOWNERS
new file mode 100644
index 0000000..8af26fc
--- /dev/null
+++ b/CODEOWNERS
@@ -0,0 +1,3 @@
+# Default owner for the repo. Only people on the team can approve PRs and perform other
+# repo operations.
+*   @newrelic/java