From febaa18688e2c4590396f4b627747e8ede049d3d Mon Sep 17 00:00:00 2001
From: Mayuki Sawatari <mayuki+github@misuzilla.org>
Date: Sun, 23 Jun 2024 22:27:01 +0900
Subject: [PATCH] Update build.yaml

---
 .github/workflows/build.yaml | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 63e08ce..f63813d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -17,15 +17,6 @@ jobs:
   Build:
     runs-on: ubuntu-latest
     steps:
-    # Load secrets from 1Password
-    - uses: 1password/load-secrets-action@v2
-      id: op-load-secret
-      with:
-        export-env: false
-      env:
-        OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN_PUBLIC }}
-        NUGET_AUTH_TOKEN: "op://GitHub Actions - Public/NuGet - Azure Artifacts/credential"
-
     - uses: actions/checkout@v4
     - uses: actions/setup-dotnet@v4
       with:
@@ -62,6 +53,16 @@ jobs:
         name: Packages
         path: artifacts
 
+    # Load secrets from 1Password
+    - uses: 1password/load-secrets-action@v2
+      if: ${{ github.event_name != 'pull_request' }}
+      id: op-load-secret
+      with:
+        export-env: false
+      env:
+        OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN_PUBLIC }}
+        NUGET_AUTH_TOKEN: "op://GitHub Actions - Public/NuGet - Azure Artifacts/credential"
+
     - name: Publish NuGet packages to Azure Artifacts
       if: ${{ github.event_name != 'pull_request' }}
       run: |