diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index d8bde874c..bf0eea9e8 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -90,7 +90,7 @@ jobs:
 
       - name: Run GoReleaser (release)
         if: inputs.publish
-        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
+        uses: goreleaser/goreleaser-action@v6.4.0
         with:
           version: v2.12.7
           args: release
@@ -104,7 +104,7 @@ jobs:
 
       - name: Run GoReleaser (snapshot)
         if: ${{ !inputs.publish }}
-        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
+        uses: goreleaser/goreleaser-action@v6.4.0
         with:
           version: v2.12.7
           args: release --snapshot --clean
diff --git a/.github/workflows/trigger-docs.yml b/.github/workflows/trigger-docs.yml
index 645d976b5..b39848cb3 100644
--- a/.github/workflows/trigger-docs.yml
+++ b/.github/workflows/trigger-docs.yml
@@ -5,6 +5,7 @@ on:
     types: [published]
 jobs:
   update:
+    if: github.repository == 'temporalio/cli'
     runs-on: ubuntu-latest
     defaults:
       run: