diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f27ebeb5f..71a42ff40 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -26,7 +26,9 @@ concurrency:
 
 jobs:
   push-images-to-production-artifacts:
-    if: github.ref == 'refs/heads/main'
+    if:
+      ${{ github.ref == 'refs/heads/main' && (inputs.foolproof == 'true' ||
+      github.event_name == 'release') }}
     runs-on: ubuntu-22.04
     strategy:
       fail-fast: false