diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6a8954f1..f1b8ed77 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,13 +13,32 @@ jobs:
       move_latest: false
     secrets: inherit
 
-  update-tags:
+  qa-approval:
     needs: build
     runs-on: ubuntu-latest
 
     environment:
       name: dockerhub-production
 
+    steps:
+      - name: QA approval
+        run: echo "QA approval received"
+
+  admin-approval:
+    needs: qa-approval
+    runs-on: ubuntu-latest
+
+    environment:
+      name: dockerhub-admin-approval
+
+    steps:
+      - name: Admin approval
+        run: echo "Admin approval received"
+
+  update-tags:
+    needs: admin-approval
+    runs-on: ubuntu-latest
+
     steps:
       - name: Login to Docker Hub
         uses: docker/login-action@v4