diff --git a/.github/workflows/appimage.yml b/.github/workflows/appimage.yml
index 9b08c82c8..267bdfc75 100644
--- a/.github/workflows/appimage.yml
+++ b/.github/workflows/appimage.yml
@@ -173,7 +173,7 @@ jobs:
             cryptomator-*.asc
           if-no-files-found: error
       - name: Publish AppImage on GitHub Releases
-        if: startsWith(github.ref, 'refs/tags/')
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name == 'published'
         uses: softprops/action-gh-release@v1
         with:
           fail_on_unmatched_files: true
diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
index 39811359d..8cfbc16b6 100644
--- a/.github/workflows/debian.yml
+++ b/.github/workflows/debian.yml
@@ -145,7 +145,7 @@ jobs:
       
       # If ref is a tag, also upload to GitHub Releases:
       - name: Publish Debian package on GitHub Releases
-        if: startsWith(github.ref, 'refs/tags/')
+        if: startsWith(github.ref, 'refs/tags/') && inputs.dput
         env:
           GITHUB_TOKEN: ${{ secrets.CRYPTOBOT_RELEASE_TOKEN }}
         run: |
diff --git a/.github/workflows/mac-dmg.yml b/.github/workflows/mac-dmg.yml
index 6d2bc19ce..be5747839 100644
--- a/.github/workflows/mac-dmg.yml
+++ b/.github/workflows/mac-dmg.yml
@@ -256,7 +256,7 @@ jobs:
           path: Cryptomator-*.dmg
           if-no-files-found: error
       - name: Publish dmg on GitHub Releases
-        if: startsWith(github.ref, 'refs/tags/')
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name == 'published'
         uses: softprops/action-gh-release@v1
         with:
           fail_on_unmatched_files: true
diff --git a/.github/workflows/win-exe.yml b/.github/workflows/win-exe.yml
index e3e874e01..035b75e14 100644
--- a/.github/workflows/win-exe.yml
+++ b/.github/workflows/win-exe.yml
@@ -255,7 +255,7 @@ jobs:
             Cryptomator-*.asc
           if-no-files-found: error
       - name: Publish .msi on GitHub Releases
-        if: startsWith(github.ref, 'refs/tags/')
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name == 'published'
         uses: softprops/action-gh-release@v1
         with:
           fail_on_unmatched_files: true
@@ -366,7 +366,7 @@ jobs:
             Cryptomator-*.asc
           if-no-files-found: error
       - name: Publish .msi on GitHub Releases
-        if: startsWith(github.ref, 'refs/tags/')
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name == 'published'
         uses: softprops/action-gh-release@v1
         with:
           fail_on_unmatched_files: true
@@ -416,7 +416,7 @@ jobs:
           local-dir: files/
   notify-winget:
     name: Notify for winget-release
-    if: startsWith(github.ref, 'refs/tags/')
+    if: startsWith(github.ref, 'refs/tags/') && github.event_name == 'published'
     needs: [build-msi]
     runs-on: ubuntu-latest
     steps: