diff --git a/.github/workflows/deploy-beta.yml b/.github/workflows/deploy-beta.yml
index 12fb4780b..596e1c5e1 100644
--- a/.github/workflows/deploy-beta.yml
+++ b/.github/workflows/deploy-beta.yml
@@ -3,9 +3,23 @@ on:
   push:
     branches: [master]
 jobs:
-  docker:
+  approve:
+    runs-on: ubuntu-latest
+
+    steps:
+    -
+      name: Approve
+      run: echo For security reasons, all pull requests need to be approved first before running any automated CI.
+
+  build_and_publish:
     name: Build Publish and Deploy Beta
+
     runs-on: ubuntu-latest
+
+    needs: [approve]
+    environment:
+      name: Deploy Test Build
+
     steps:
       -
         name: Check Out Repo
diff --git a/.github/workflows/deploy-test-build.yml b/.github/workflows/deploy-test-build.yml
index a1a022a43..3e8cbc17b 100644
--- a/.github/workflows/deploy-test-build.yml
+++ b/.github/workflows/deploy-test-build.yml
@@ -1,14 +1,18 @@
 # Build, publish & deploy $branch
 name: Deploy test-build
+
 on:
-  create:
-    branches: '*'
+  push:
+    branches-ignore:
+      - 'master'
+
 jobs:
-  docker:
-    name: Build Publish and Deploy
+  build_and_publish:
+    name: build, publish, & deploy
+
     runs-on: ubuntu-latest
+
     steps:
-      # Check out code
       - 
         name: Checkout
         uses: actions/checkout@v2