Merge pull request #850 from google/provenance

ci: Generate provenance on a tag only.
google · Apr 26, 2024 · 7a28fc3 · 7a28fc3
2 parents 1474283 + 17426aa
commit 7a28fc3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -66,6 +66,7 @@ jobs:
 
   binary-provenance:
     needs: [goreleaser]
+    if: ${{ startsWith(github.ref, 'refs/tags/') }}
     permissions:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
@@ -106,6 +107,7 @@ jobs:
 
   image-provenance:
     needs: [goreleaser]
+    if: ${{ startsWith(github.ref, 'refs/tags/') }}
     permissions:
       actions: read
       id-token: write