diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 08701fe..b1e30b6 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -54,6 +54,7 @@ jobs:
       # ==========================================
 
       - name: 5. Dynamic Security Scan (OWASP ZAP)
+        if: github.event_name == 'push'
         run: |
           echo ">>> Lançando Sandbox Efêmero..."
           docker rm -f apex-sandbox || true
@@ -82,6 +83,7 @@ jobs:
           docker rm -f apex-sandbox || true
 
       - name: 6. Production Deployment & Local Reports
+        if: github.event_name == 'push'
         run: |
           echo ">>> Atualizando Produção..."
           docker rm -f portal-corporativo || true
@@ -100,7 +102,7 @@ jobs:
           docker cp qatests/report.html portal-corporativo:/usr/src/app/frontend/zap-report.html || true
 
       - name: 7. Archive ZAP Report (Gitea Artifacts)
-        if: always()
+        if: always() && github.event_name == 'push' 
         uses: actions/upload-artifact@v3
         with:
           name: owasp-zap-report