ci: Generate provenance on a tag only.

google · Apr 26, 2024 · 17426aa · 17426aa
1 parent 1474283
commit 17426aa
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -66,6 +66,7 @@ jobs:
 
   binary-provenance:
     needs: [goreleaser]
+    if: ${{ startsWith(github.ref, 'refs/tags/') }}
     permissions:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
@@ -106,6 +107,7 @@ jobs:
 
   image-provenance:
     needs: [goreleaser]
+    if: ${{ startsWith(github.ref, 'refs/tags/') }}
     permissions:
       actions: read
       id-token: write