diff --git a/.github/workflows/cd-workflow.yml b/.github/workflows/cd-workflow.yml
index 439779bf..2eba135a 100644
--- a/.github/workflows/cd-workflow.yml
+++ b/.github/workflows/cd-workflow.yml
@@ -1,10 +1,26 @@
 name: PagerDuty Live Continuous Deployment Pipeline (Main)
 
 on:
+  # Runs on pushes targeting the default branch
   push:
     branches:
       - main
 
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
+# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
 jobs:
   build-deploy:
     runs-on: ubuntu-latest
@@ -48,8 +64,6 @@ jobs:
         with:
           target_branch: gh-pages
           build_dir: build
-        env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
 
   sync-branch:
     runs-on: ubuntu-latest
@@ -61,4 +75,4 @@ jobs:
           type: now
           from_branch: main
           target_branch: develop
-          github_token: ${{ secrets.GH_TOKEN }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}