From 480e458876f516ec0cc07555c00446c0588e5f23 Mon Sep 17 00:00:00 2001
From: Lars <lars@roth-kl.de>
Date: Wed, 17 Apr 2024 14:02:01 +0200
Subject: [PATCH] fix(ci): :bug: Only sign on master and tag

---
 .github/workflows/docker-publish.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 2c77c41..8711178 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -73,3 +73,4 @@ jobs:
         # This step uses the identity token to provision an ephemeral certificate
         # against the sigstore community Fulcio instance.
         run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+        if: github.event_name != 'pull_request'