diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5c7d66a..8547aa3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -25,6 +25,9 @@ jobs:
       buildTest: 'Test Fixes'
 
     steps:
+      - name: Configure
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
       - name: Checkout
         uses: actions/checkout@v4
         with:
@@ -90,8 +93,9 @@ jobs:
         shell: "pwsh"
 
       - name: Import PFX and sign
+        if: github.event_name != 'pull_request'
         env:
-          KEY_PFX_PASS: ${{ secrets.KEY_PFX_PASS}}
+          KEY_PFX_PASS: ${{ secrets.KEY_PFX_PASS }}
         run: |
                $pfxBase64 = "${{ secrets.KEY_PFX_B64 }}"
                [IO.File]::WriteAllBytes("${{ github.workspace }}\signing-cert.pfx", [Convert]::FromBase64String($pfxBase64))
@@ -158,11 +162,6 @@ jobs:
     container: debian:11-slim
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
       - name: Install dependencies
         run: |
           dpkg --add-architecture i386
@@ -174,6 +173,14 @@ jobs:
             git cmake rsync \
             g++ gcc
 
+      - name: Configure
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
       - name: GPG Import
         run: |
           echo "${{ secrets.PUB_ASC }}" > "${{ secrets.PUB_ASC_FILE }}"