diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 0d9d290..6548cf2 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -23,7 +23,7 @@ jobs:
   publish-to-pypi:
     name: >-
       Publish Python 🐍 distribution 📦 to PyPI
-    if: startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/main' # only publish to PyPI on tag pushes or dev version for main
+    if: "${{ startsWith(github.ref, 'refs/tags/') }}"
     needs:
     - build
     runs-on: ubuntu-latest
@@ -46,7 +46,7 @@ jobs:
     name: >-
       Sign the Python 🐍 distribution 📦 with Sigstore
       and upload them to GitHub Release
-    if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
+    if: "${{ startsWith(github.ref, 'refs/tags/') }}"
     needs:
     - publish-to-pypi
     runs-on: ubuntu-latest