diff --git a/.github/workflows/upload-release.yml b/.github/workflows/upload-release.yml
index 0db501ef5..2eaf48d0e 100644
--- a/.github/workflows/upload-release.yml
+++ b/.github/workflows/upload-release.yml
@@ -83,6 +83,7 @@ jobs:
           ids_project_name: determinate-nix
           ids_binary_prefix: determinate-nix
           skip_acl: true
+          allowed_branches: '["detsys-main"]'
 
   publish:
     needs: