diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index 73daced..73662a7 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -394,7 +394,6 @@ jobs:
                     issuer = "https://token.actions.githubusercontent.com"
                     runnerEnvironment = "github-hosted"
                     sourceRepositoryURI = "${{ github.server_url }}/${{ github.repository }}"
-                    sourceRepositoryRef = "${{ github.event_name != 'pull_request' && github.ref || '' }}"
       -
         name: Install Cosign
         if: ${{ needs.prepare.outputs.sign == 'true' || inputs.cache }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6f32981..06023ed 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -354,7 +354,6 @@ jobs:
                     issuer = "https://token.actions.githubusercontent.com"
                     runnerEnvironment = "github-hosted"
                     sourceRepositoryURI = "${{ github.server_url }}/${{ github.repository }}"
-                    sourceRepositoryRef = "${{ github.event_name != 'pull_request' && github.ref || '' }}"
       -
         name: Install Cosign
         if: ${{ needs.prepare.outputs.sign == 'true' || inputs.cache }}