diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c1af70dc0a7c6..6b5532b5fd6e9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -635,7 +635,7 @@ jobs:
         run: ls -lh build
 
       - name: Publish Coder CLI binaries and detached signatures to GCS
-        if: ${{ !inputs.dry_run }}
+        if: ${{ !inputs.dry_run && github.ref == 'refs/heads/main' && github.repository_owner == 'coder'}}
         run: |
           set -euxo pipefail