From ddb3705c5036eb63666efd99aa8a7b790763375d Mon Sep 17 00:00:00 2001
From: Joseph Donofry <joedonofry@gmail.com>
Date: Thu, 27 Oct 2022 17:03:51 -0400
Subject: [PATCH] Only run codesign macos from protected triggered pipelines

---
 .gitlab-ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 732e7cac..0e172d5c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -153,7 +153,7 @@ codesign-macos:
   rules:
     - if : '$CI_COMMIT_BRANCH == "master"'
     - if : $CI_COMMIT_TAG
-    - if : $CI_PIPELINE_TRIGGERED
+    - if : '$CI_PIPELINE_TRIGGERED && $CI_COMMIT_REF_PROTECTED'
       variables:
         PLAT: "m1"
   artifacts: