Why does this require access to a project's env variables?

[oalexdoda]

All it should do is just manage the deployments, not read the secrets unless I'm missing something? Thanks!