diff --git a/.github/workflows/build_airflow.yaml b/.github/workflows/build_airflow.yaml
index 30340053d..5b5e62730 100644
--- a/.github/workflows/build_airflow.yaml
+++ b/.github/workflows/build_airflow.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 1/2 * * # https://crontab.guru/#0_0_1/2_*_*
   push:
@@ -39,3 +45,5 @@ jobs:
       product-name: airflow
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_druid.yaml b/.github/workflows/build_druid.yaml
index e06452bb7..afbf17418 100644
--- a/.github/workflows/build_druid.yaml
+++ b/.github/workflows/build_druid.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 1 1/2 * * # https://crontab.guru/#0_1_1/2_*_*
   push:
@@ -41,3 +47,5 @@ jobs:
       product-name: druid
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_hadoop.yaml b/.github/workflows/build_hadoop.yaml
index 9725ef4bf..e20c598f7 100644
--- a/.github/workflows/build_hadoop.yaml
+++ b/.github/workflows/build_hadoop.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 1/2 * * # https://crontab.guru/#0_2_1/2_*_*
   push:
@@ -41,3 +47,5 @@ jobs:
       product-name: hadoop
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_hbase.yaml b/.github/workflows/build_hbase.yaml
index 75105c4f3..8d8ba87e9 100644
--- a/.github/workflows/build_hbase.yaml
+++ b/.github/workflows/build_hbase.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -42,3 +48,5 @@ jobs:
       product-name: hbase
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_hive.yaml b/.github/workflows/build_hive.yaml
index 01c6b96d0..cd0b31c60 100644
--- a/.github/workflows/build_hive.yaml
+++ b/.github/workflows/build_hive.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 2/2 * * # https://crontab.guru/#0_2_2/2_*_*
   push:
@@ -42,4 +48,6 @@ jobs:
       product-name: hive
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       runners: ubicloud
diff --git a/.github/workflows/build_java-base.yaml b/.github/workflows/build_java-base.yaml
index dbb56540e..6a6d1d838 100644
--- a/.github/workflows/build_java-base.yaml
+++ b/.github/workflows/build_java-base.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 1/2 * * # https://crontab.guru/#0_0_1/2_*_*
   push:
@@ -37,3 +43,5 @@ jobs:
       product-name: java-base
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_java-devel.yaml b/.github/workflows/build_java-devel.yaml
index bafdb05ba..23b6bfa88 100644
--- a/.github/workflows/build_java-devel.yaml
+++ b/.github/workflows/build_java-devel.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 1 1/2 * * # https://crontab.guru/#0_1_1/2_*_*
   push:
@@ -37,3 +43,5 @@ jobs:
       product-name: java-devel
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_kafka-testing-tools.yaml b/.github/workflows/build_kafka-testing-tools.yaml
index b559048c4..1c9692fcc 100644
--- a/.github/workflows/build_kafka-testing-tools.yaml
+++ b/.github/workflows/build_kafka-testing-tools.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 1/2 * * # https://crontab.guru/#0_2_1/2_*_*
   push:
@@ -41,3 +47,5 @@ jobs:
       product-name: kafka-testing-tools
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_kafka.yaml b/.github/workflows/build_kafka.yaml
index a8b2bdf3d..a0c06e7af 100644
--- a/.github/workflows/build_kafka.yaml
+++ b/.github/workflows/build_kafka.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -42,3 +48,5 @@ jobs:
       product-name: kafka
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_krb5.yaml b/.github/workflows/build_krb5.yaml
index d19e8439f..c8322ef55 100644
--- a/.github/workflows/build_krb5.yaml
+++ b/.github/workflows/build_krb5.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 2/2 * * # https://crontab.guru/#0_2_2/2_*_*
   push:
@@ -37,3 +43,5 @@ jobs:
       product-name: krb5
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_nifi.yaml b/.github/workflows/build_nifi.yaml
index 6e3090ecc..8e46aae84 100644
--- a/.github/workflows/build_nifi.yaml
+++ b/.github/workflows/build_nifi.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 1/2 * * # https://crontab.guru/#0_0_1/2_*_*
   push:
@@ -41,6 +47,8 @@ jobs:
       product-name: nifi
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       # Since building Vector from source, this build runs out of disk space.
       # As such, we use the Ubicloud runners which provide bigger disks.
       runners: ubicloud
diff --git a/.github/workflows/build_omid.yaml b/.github/workflows/build_omid.yaml
index 3bb06244b..8d1dfb49c 100644
--- a/.github/workflows/build_omid.yaml
+++ b/.github/workflows/build_omid.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 1 1/2 * * # https://crontab.guru/#0_1_1/2_*_*
   push:
@@ -41,3 +47,5 @@ jobs:
       product-name: omid
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_opa.yaml b/.github/workflows/build_opa.yaml
index cd7d2f356..f8efdbec4 100644
--- a/.github/workflows/build_opa.yaml
+++ b/.github/workflows/build_opa.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 1/2 * * # https://crontab.guru/#0_2_1/2_*_*
   push:
@@ -39,3 +45,5 @@ jobs:
       product-name: opa
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_opensearch.yaml b/.github/workflows/build_opensearch.yaml
index 6d1e927e9..8cbcd506f 100644
--- a/.github/workflows/build_opensearch.yaml
+++ b/.github/workflows/build_opensearch.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -42,4 +48,6 @@ jobs:
       product-name: opensearch
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       runners: ubicloud
diff --git a/.github/workflows/build_opensearch_dashboards.yaml b/.github/workflows/build_opensearch_dashboards.yaml
index be0396b8e..64f066228 100644
--- a/.github/workflows/build_opensearch_dashboards.yaml
+++ b/.github/workflows/build_opensearch_dashboards.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -40,4 +46,6 @@ jobs:
       product-name: opensearch-dashboards
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       runners: ubicloud
diff --git a/.github/workflows/build_spark-connect-client.yaml b/.github/workflows/build_spark-connect-client.yaml
index 20161b81b..20b3d649b 100644
--- a/.github/workflows/build_spark-connect-client.yaml
+++ b/.github/workflows/build_spark-connect-client.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -42,4 +48,6 @@ jobs:
       # Since building Vector from source, this build runs out of disk space.
       # As such, we use the Ubicloud runners which provide bigger disks.
       runners: ubicloud
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       publish-to-quay: false
diff --git a/.github/workflows/build_spark-k8s.yaml b/.github/workflows/build_spark-k8s.yaml
index 6e0c69278..45cd9cd95 100644
--- a/.github/workflows/build_spark-k8s.yaml
+++ b/.github/workflows/build_spark-k8s.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -42,4 +48,6 @@ jobs:
       product-name: spark-k8s
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       runners: ubicloud
diff --git a/.github/workflows/build_stackable-base.yaml b/.github/workflows/build_stackable-base.yaml
index 422f468ff..e73f1252e 100644
--- a/.github/workflows/build_stackable-base.yaml
+++ b/.github/workflows/build_stackable-base.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 1 2/2 * * # https://crontab.guru/#0_1_2/2_*_*
   push:
@@ -38,3 +44,5 @@ jobs:
       product-name: stackable-base
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_superset.yaml b/.github/workflows/build_superset.yaml
index 94d1b750c..6123510d9 100644
--- a/.github/workflows/build_superset.yaml
+++ b/.github/workflows/build_superset.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 2/2 * * # https://crontab.guru/#0_2_2/2_*_*
   push:
@@ -39,3 +45,5 @@ jobs:
       product-name: superset
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_testing-tools.yaml b/.github/workflows/build_testing-tools.yaml
index be9395cbc..1793eeab1 100644
--- a/.github/workflows/build_testing-tools.yaml
+++ b/.github/workflows/build_testing-tools.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 1/2 * * # https://crontab.guru/#0_0_1/2_*_*
   push:
@@ -45,3 +51,5 @@ jobs:
       product-name: ${{ matrix.product-name }}
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_tools.yaml b/.github/workflows/build_tools.yaml
index d7a47f34c..c68762747 100644
--- a/.github/workflows/build_tools.yaml
+++ b/.github/workflows/build_tools.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 1 1/2 * * # https://crontab.guru/#0_1_1/2_*_*
   push:
@@ -38,3 +44,5 @@ jobs:
       product-name: tools
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_trino-cli.yaml b/.github/workflows/build_trino-cli.yaml
index 7558ef57d..5dc3260a1 100644
--- a/.github/workflows/build_trino-cli.yaml
+++ b/.github/workflows/build_trino-cli.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 1/2 * * # https://crontab.guru/#0_2_1/2_*_*
   push:
@@ -40,3 +46,5 @@ jobs:
       product-name: trino-cli
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_trino.yaml b/.github/workflows/build_trino.yaml
index 559f0ffe7..0ad8ea84e 100644
--- a/.github/workflows/build_trino.yaml
+++ b/.github/workflows/build_trino.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 0 2/2 * * # https://crontab.guru/#0_0_2/2_*_*
   push:
@@ -41,6 +47,8 @@ jobs:
       product-name: trino
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
       # Since building Vector from source, this build runs out of disk space.
       # As such, we use the Ubicloud runners which provide bigger disks.
       runners: ubicloud
diff --git a/.github/workflows/build_vector.yaml b/.github/workflows/build_vector.yaml
index c963b7093..a9db48545 100644
--- a/.github/workflows/build_vector.yaml
+++ b/.github/workflows/build_vector.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 1 2/2 * * # https://crontab.guru/#0_1_2/2_*_*
   push:
@@ -37,3 +43,5 @@ jobs:
       product-name: vector
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/build_zookeeper.yaml b/.github/workflows/build_zookeeper.yaml
index 8f93b5f83..f4b62939f 100644
--- a/.github/workflows/build_zookeeper.yaml
+++ b/.github/workflows/build_zookeeper.yaml
@@ -5,6 +5,12 @@ run-name: |
 
 on:
   workflow_dispatch:
+    inputs:
+      skip-publish:
+        description: Skip publishing and signing images
+        type: boolean
+        required: true
+        default: false
   schedule:
     - cron: 0 2 2/2 * * # https://crontab.guru/#0_2_2/2_*_*
   push:
@@ -41,3 +47,5 @@ jobs:
       product-name: zookeeper
       sdp-version: ${{ github.ref_type == 'tag' && github.ref_name || '0.0.0-dev' }}
       registry-namespace: sdp
+      # Default to true if not set/empty (if not triggered by workflow_dispatch)
+      publish: ${{ !inputs.skip-publish }}
diff --git a/.github/workflows/reusable_build_image.yaml b/.github/workflows/reusable_build_image.yaml
index c7f76c928..54b97b9d4 100644
--- a/.github/workflows/reusable_build_image.yaml
+++ b/.github/workflows/reusable_build_image.yaml
@@ -26,6 +26,10 @@ on:
           - `ubicloud`: Both the x86_64 and the aarch64 builds run on the Ubicloud runners
         default: mixed
         type: string
+      publish:
+        description: Whether to publish and sign images.
+        type: boolean
+        default: true
       publish-to-quay:
         description: |
           Whether to publish to quay.io or not. If `true`, the `quay-robot-secret` needs to be
@@ -123,6 +127,7 @@ jobs:
           sdp-version: ${{ inputs.sdp-version }}
 
       - name: Publish Container Image on oci.stackable.tech
+        if: inputs.publish
         uses: stackabletech/actions/publish-image@8a8085be0a8cec3d24ad3970e602d65be487da6a # v0.14.1
         with:
           image-registry-uri: oci.stackable.tech
@@ -138,7 +143,7 @@ jobs:
           source-image-uri: localhost/${{ inputs.registry-namespace }}/${{ inputs.product-name }}:${{ steps.build.outputs.image-manifest-tag }}
 
       - name: Publish Container Image on quay.io
-        if: inputs.publish-to-quay
+        if: inputs.publish && inputs.publish-to-quay
         uses: stackabletech/actions/publish-image@8a8085be0a8cec3d24ad3970e602d65be487da6a # v0.14.1
         with:
           image-registry-uri: quay.io
@@ -171,6 +176,7 @@ jobs:
           persist-credentials: false
 
       - name: Publish and Sign Image Index Manifest to oci.stackable.tech
+        if: inputs.publish
         uses: stackabletech/actions/publish-image-index-manifest@8a8085be0a8cec3d24ad3970e602d65be487da6a # v0.14.1
         with:
           image-registry-uri: oci.stackable.tech
@@ -185,7 +191,7 @@ jobs:
           image-index-manifest-tag: ${{ matrix.versions }}-stackable${{ inputs.sdp-version }}
 
       - name: Publish and Sign Image Index Manifest to quay.io
-        if: inputs.publish-to-quay
+        if: inputs.publish && inputs.publish-to-quay
         uses: stackabletech/actions/publish-image-index-manifest@8a8085be0a8cec3d24ad3970e602d65be487da6a # v0.14.1
         with:
           image-registry-uri: quay.io