diff --git a/.forgejo/workflows/build-deployer.yaml b/.forgejo/workflows/build-deployer.yaml
index 994ddfe..154a8df 100644
--- a/.forgejo/workflows/build-deployer.yaml
+++ b/.forgejo/workflows/build-deployer.yaml
@@ -19,4 +19,4 @@ jobs:
           context: "{{defaultContext}}:containers/deployer"
           tags: git.janky.solutions/jankysolutions/infra/deployer:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-freeswitch.yaml b/.forgejo/workflows/build-freeswitch.yaml
index 711c705..428464a 100644
--- a/.forgejo/workflows/build-freeswitch.yaml
+++ b/.forgejo/workflows/build-freeswitch.yaml
@@ -19,4 +19,4 @@ jobs:
           context: "{{defaultContext}}:containers/freeswitch"
           tags: git.janky.solutions/jankysolutions/infra/freeswitch:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-freetakserver.yaml b/.forgejo/workflows/build-freetakserver.yaml
index d99cb2c..b66637d 100644
--- a/.forgejo/workflows/build-freetakserver.yaml
+++ b/.forgejo/workflows/build-freetakserver.yaml
@@ -18,4 +18,4 @@ jobs:
           context: FreeTakServer
           tags: git.janky.solutions/jankysolutions/infra/freetakserver:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-keycloak.yaml b/.forgejo/workflows/build-keycloak.yaml
index 3d91236..8cc7323 100644
--- a/.forgejo/workflows/build-keycloak.yaml
+++ b/.forgejo/workflows/build-keycloak.yaml
@@ -19,4 +19,4 @@ jobs:
           context: "{{defaultContext}}:containers/keycloak"
           tags: git.janky.solutions/jankysolutions/infra/keycloak:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-openbao-csi-provider.yaml b/.forgejo/workflows/build-openbao-csi-provider.yaml
index c8b6d0d..8ca287e 100644
--- a/.forgejo/workflows/build-openbao-csi-provider.yaml
+++ b/.forgejo/workflows/build-openbao-csi-provider.yaml
@@ -19,4 +19,4 @@ jobs:
           context: "{{defaultContext}}:containers/openbao-csi-provider"
           tags: git.janky.solutions/jankysolutions/infra/openbao-csi-provider:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-openbao.yaml b/.forgejo/workflows/build-openbao.yaml
index d38e1ff..2cae02f 100644
--- a/.forgejo/workflows/build-openbao.yaml
+++ b/.forgejo/workflows/build-openbao.yaml
@@ -19,4 +19,4 @@ jobs:
           context: "{{defaultContext}}:containers/openbao"
           tags: git.janky.solutions/jankysolutions/infra/openbao:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-pethublocal.yaml b/.forgejo/workflows/build-pethublocal.yaml
index 60b19a3..ed7215c 100644
--- a/.forgejo/workflows/build-pethublocal.yaml
+++ b/.forgejo/workflows/build-pethublocal.yaml
@@ -18,4 +18,4 @@ jobs:
           context: pethublocal
           tags: git.janky.solutions/jankysolutions/infra/pethublocal:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-synapse.yaml b/.forgejo/workflows/build-synapse.yaml
index 964f83f..85fe7d6 100644
--- a/.forgejo/workflows/build-synapse.yaml
+++ b/.forgejo/workflows/build-synapse.yaml
@@ -18,4 +18,4 @@ jobs:
           file: containers/synapse/Containerfile
           tags: git.janky.solutions/jankysolutions/infra/synapse:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.forgejo/workflows/build-traefik-forward-auth.yaml b/.forgejo/workflows/build-traefik-forward-auth.yaml
index def3ddf..3cf08d1 100644
--- a/.forgejo/workflows/build-traefik-forward-auth.yaml
+++ b/.forgejo/workflows/build-traefik-forward-auth.yaml
@@ -19,4 +19,4 @@ jobs:
           context: "{{defaultContext}}:containers/traefik-forward-auth"
           tags: git.janky.solutions/jankysolutions/infra/traefik-forward-auth:latest
           platforms: linux/amd64
-          push: true
+          push: ${{ github.ref == 'refs/heads/main' }}