Add small improvements to docs related to deployment protection rules (#35499)

content/actions/deployment/targeting-different-environments/using-environments-for-deployment.md

@@ -46,6 +46,14 @@ Third-party systems can be observability systems, change management systems, cod
 
 {% endif %}
 
+{% ifversion fpt %}
+{% note %}
+
+**Note:** Deployment protection rules are only available in **public** repositories if you are using {% data variables.product.prodname_free_user %}, {% data variables.product.prodname_pro %}, or {% data variables.product.prodname_team %}. For access to deployment protection rules in **private** or **internal** repositories, you must use {% data variables.product.prodname_pro %}, {% data variables.product.prodname_team %}, or {% data variables.product.prodname_enterprise %}. For more information on switching your subscription, see "[AUTOTITLE](/billing/managing-billing-for-your-github-account/upgrading-your-github-subscription)."
+
+{% endnote %}
+{% endif %}
+
 ### Required reviewers
 
 Use required reviewers to require a specific person or team to approve workflow jobs that reference the environment. You can list up to six users or teams as reviewers. The reviewers must have at least read access to the repository. Only one of the required reviewers needs to approve the job for it to proceed.
@@ -90,11 +98,22 @@ Once custom deployment protection rules have been created and installed on a rep
 
 Secrets stored in an environment are only available to workflow jobs that reference the environment. If the environment requires approval, a job cannot access environment secrets until one of the required reviewers approves it. For more information about secrets, see "[AUTOTITLE](/actions/security-guides/encrypted-secrets)."
 
+{% ifversion fpt %}
+{% note %}
+
+**Notes:**
+
+- Workflows that run on self-hosted runners are not run in an isolated container, even if they use environments. Environment secrets should be treated with the same level of security as repository and organization secrets. For more information, see "[AUTOTITLE](/actions/security-guides/security-hardening-for-github-actions#hardening-for-self-hosted-runners)."
+- Environment secrets are only available in **public** repositories if you are using {% data variables.product.prodname_free_user %}, {% data variables.product.prodname_pro %}, or {% data variables.product.prodname_team %}. For access to environment secrets in **private** or **internal** repositories, you must use {% data variables.product.prodname_pro %}, {% data variables.product.prodname_team %}, or {% data variables.product.prodname_enterprise %}. For more information on switching your subscription, see "[AUTOTITLE](/billing/managing-billing-for-your-github-account/upgrading-your-github-subscription)."
+
+{% endnote %}
+{% else %}
 {% note %}
 
 **Note:** Workflows that run on self-hosted runners are not run in an isolated container, even if they use environments. Environment secrets should be treated with the same level of security as repository and organization secrets. For more information, see "[AUTOTITLE](/actions/security-guides/security-hardening-for-github-actions#hardening-for-self-hosted-runners)."
 
 {% endnote %}
+{% endif %}
 
 {% ifversion actions-configuration-variables %}
 ## Environment variables

content/get-started/learning-about-github/githubs-products.md

@@ -33,11 +33,14 @@ With {% data variables.product.prodname_free_team %} for personal accounts, you
 With {% data variables.product.prodname_free_user %}, your personal account includes:
 - {% data variables.product.prodname_gcf %}
 - {% data variables.product.prodname_dependabot_alerts %}
+- Deployment protection rules for public repositories
 - Two-factor authentication enforcement
-- 2,000 {% data variables.product.prodname_actions %} minutes per month
 - 500 MB {% data variables.product.prodname_registry %} storage {% ifversion fpt or ghec%}
 - 120 {% data variables.product.prodname_github_codespaces %} core hours per month
 - 15 GB {% data variables.product.prodname_github_codespaces %} storage per month {% endif %}
+- {% data variables.product.prodname_actions %} features:
+   - 2,000 minutes per month
+   - Deployment protection rules for public repositories
 
 ## {% data variables.product.prodname_pro %}
 
@@ -104,6 +107,7 @@ In addition to the features available with {% data variables.product.prodname_te
 - Additional security, compliance, and deployment controls
 - Authentication with SAML single sign-on
 - Access provisioning with SAML or SCIM
+- Deployment protection rules with {% data variables.product.prodname_actions %} for private or internal repositories
 - {% data variables.product.prodname_github_connect %}
 - The option to purchase {% data variables.product.prodname_GH_advanced_security %}. For more information, see "[AUTOTITLE](/get-started/learning-about-github/about-github-advanced-security)."