Merge pull request #419 from ForgeRock/use-trusted-publishers

ci: change-event-for-publish-snapshot

Author: ryanbas21

.github/workflows/publish.yml

@@ -158,7 +158,7 @@ jobs:
 
   # --- new reusable job used by the snapshot wrapper ---
   trusted-publish:
-    if: ${{ github.event_name == 'workflow_call' }}
+    if: ${{ github.event_name != 'push' }}
     name: Trusted Snapshot Publish
     permissions:
       contents: write # read+write repo (okay for artifacts/logs)