diff --git a/.github/actions/build-electron/action.yml b/.github/actions/build-electron/action.yml
index c2e5059ee7..a3c89f45e1 100644
--- a/.github/actions/build-electron/action.yml
+++ b/.github/actions/build-electron/action.yml
@@ -229,7 +229,7 @@ runs:
         fi
     - name: Generate artifact attestation
       if: ${{ inputs.is-release == 'true' }}
-      uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
+      uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
       with:
         subject-path: ${{ steps.github-upload.outputs.UPLOADED_PATHS }}
     - name: Generate siso report
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2535bf29eb..f4081658cc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -34,6 +34,9 @@ on:
         type: boolean
         default: false
   push:
+    branches:
+      - main
+      - '[1-9][0-9]-x-y'
   pull_request:
 
 defaults: