From 4d6b108f061143754dd4a7bf036ae0f524bbbc73 Mon Sep 17 00:00:00 2001
From: Ron Shakutai <58519179+RonShakutai@users.noreply.github.com>
Date: Wed, 22 Jul 2026 11:44:50 +0300
Subject: [PATCH] ci: restrict release workflow to main (#2187)

---
 .github/workflows/release.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 373ca6ce2..708f273f6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,6 +17,12 @@ jobs:
       version: ${{ steps.set-version.outputs.version }}
       image-version: ${{ steps.set-image-version.outputs.image-version }}
     steps:
+      - name: Validate release branch
+        if: ${{ github.ref != 'refs/heads/main' }}
+        run: |
+          echo "::error::Releases must be triggered from the main branch. Selected ref: ${{ github.ref }}"
+          exit 1
+
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.0
         with: