add condition, push only from main

Signed-off-by: Jonathan Gonzalez V <[email protected]>

Author: sxd

.github/workflows/bake.yaml

@@ -126,7 +126,9 @@ jobs:
   # using skopeo. Then we sign the production images too.
   copytoproduction:
     name: Copy images to production
-    if: github.event.inputs.environment == 'production' || github.event_name == 'schedule'
+    if: |
+      github.ref == 'refs/heads/main' &&
+      ( github.event.inputs.environment == 'production' || github.event_name == 'schedule' )
     runs-on: ubuntu-latest
     needs:
       - testbuild
@@ -182,4 +184,4 @@ jobs:
             '
           )
           echo "Signing ${images}"
-          cosign sign --yes ${images}
+          cosign sign --yes ${images}