diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 732e7cac..0e172d5c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -153,7 +153,7 @@ codesign-macos:
   rules:
     - if : '$CI_COMMIT_BRANCH == "master"'
     - if : $CI_COMMIT_TAG
-    - if : $CI_PIPELINE_TRIGGERED
+    - if : '$CI_PIPELINE_TRIGGERED && $CI_COMMIT_REF_PROTECTED'
       variables:
         PLAT: "m1"
   artifacts: