diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index 92bed00..7881ecb 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -16,10 +16,11 @@ jobs:
     # gate strictly on the main branch and check out the exact commit
     # that passed CI, avoiding any race with a later push to main and
     # ensuring no fork-originated ref is ever materialised here.
+    # Restrict to `push` events so scheduled CI runs do not publish.
     if: >-
       ${{ github.event.workflow_run.conclusion == 'success'
           && github.event.workflow_run.head_branch == 'main'
-          && github.event.workflow_run.event != 'pull_request' }}
+          && github.event.workflow_run.event == 'push' }}
     runs-on: ubuntu-latest
 
     steps: