Prevent public access to staging app in my Heroku pipeline

I have a Heroku pipeline with a staging app and a production app. I want to restrict access to the staging app so that features that are being tested (in staging) are not publicly accessible. How do I do that?