diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d346f52..ca4841a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,7 +16,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Set up Go
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: 1.21
 
@@ -36,7 +36,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Set up Go
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: 1.21
 
diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index c10ce5f..67c4ffb 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -18,6 +18,7 @@ jobs:
       run: docker image build -f Containerfile --tag ghcr.io/vanilla-os/differ:main .
 
     - name: Publish image
+      if: github.repository == 'Vanilla-OS/Differ' && github.ref == 'refs/heads/main'
       run: |
         docker login ghcr.io -u ${{ env.REGISTRY_USER }} -p ${{ env.REGISTRY_PASSWORD }}
         docker image push "ghcr.io/vanilla-os/differ:main"