diff --git a/.github/workflows/phar/action.yaml b/.github/workflows/phar/action.yaml
index c4762cf93..5c1a81694 100644
--- a/.github/workflows/phar/action.yaml
+++ b/.github/workflows/phar/action.yaml
@@ -81,7 +81,8 @@ runs:
       shell: bash
 
     - name: sign phar
-      if: contains(github.ref, 'release') || github.ref == 'refs/heads/master'
+      # sign only when master or tags
+      if: github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/')
       env:
         GPG_TTY: ${{ env.tty }}
       shell: bash