diff --git a/.github/workflows/aa_basic.yml b/.github/workflows/aa_basic.yml
index 8eaf90297..17f973645 100644
--- a/.github/workflows/aa_basic.yml
+++ b/.github/workflows/aa_basic.yml
@@ -24,6 +24,7 @@ concurrency:
 
 jobs:
   basic_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/aa_cc_kbc.yml b/.github/workflows/aa_cc_kbc.yml
index 20c38e2fb..960d910ee 100644
--- a/.github/workflows/aa_cc_kbc.yml
+++ b/.github/workflows/aa_cc_kbc.yml
@@ -20,6 +20,7 @@ on:
 
 jobs:
   cc_kbc_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/aa_crypto.yml b/.github/workflows/aa_crypto.yml
index e5214667d..4bfa962b2 100644
--- a/.github/workflows/aa_crypto.yml
+++ b/.github/workflows/aa_crypto.yml
@@ -16,6 +16,7 @@ on:
 
 jobs:
   crypto_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/aa_eaa_kbc.yml b/.github/workflows/aa_eaa_kbc.yml
index 3888d7192..fd1f2ba8b 100644
--- a/.github/workflows/aa_eaa_kbc.yml
+++ b/.github/workflows/aa_eaa_kbc.yml
@@ -16,6 +16,7 @@ on:
 
 jobs:
   eaa_kbc_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/aa_occlum_sgx.yml b/.github/workflows/aa_occlum_sgx.yml
index a0fd6b535..62811de9c 100644
--- a/.github/workflows/aa_occlum_sgx.yml
+++ b/.github/workflows/aa_occlum_sgx.yml
@@ -21,6 +21,7 @@ concurrency:
 
 jobs:
   occlum_sgx_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     runs-on: sgx
     steps:
       - name: Checkout Code
diff --git a/.github/workflows/aa_sample_keyprovider.yml b/.github/workflows/aa_sample_keyprovider.yml
index e4ede3394..c746bbbe3 100644
--- a/.github/workflows/aa_sample_keyprovider.yml
+++ b/.github/workflows/aa_sample_keyprovider.yml
@@ -15,6 +15,7 @@ on:
 
 jobs:
   coco_keyprovider_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     runs-on: ubuntu-latest
     strategy:
diff --git a/.github/workflows/aa_sev_kbc.yml b/.github/workflows/aa_sev_kbc.yml
index 667da32ff..1b2eb1da5 100644
--- a/.github/workflows/aa_sev_kbc.yml
+++ b/.github/workflows/aa_sev_kbc.yml
@@ -15,6 +15,7 @@ on:
 
 jobs:
   offline_sev_kbc_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/api-server-rest-basic.yml b/.github/workflows/api-server-rest-basic.yml
index 87290f88d..7158706c0 100644
--- a/.github/workflows/api-server-rest-basic.yml
+++ b/.github/workflows/api-server-rest-basic.yml
@@ -24,6 +24,7 @@ concurrency:
 
 jobs:
   basic_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/cdh_basic.yml b/.github/workflows/cdh_basic.yml
index 2a9f98027..7863626ec 100644
--- a/.github/workflows/cdh_basic.yml
+++ b/.github/workflows/cdh_basic.yml
@@ -24,6 +24,7 @@ concurrency:
 
 jobs:
   basic_ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/image_rs_build.yml b/.github/workflows/image_rs_build.yml
index 6f3e1ddf4..691fe09e5 100644
--- a/.github/workflows/image_rs_build.yml
+++ b/.github/workflows/image_rs_build.yml
@@ -23,6 +23,7 @@ concurrency:
 
 jobs:
   ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     defaults:
       run:
diff --git a/.github/workflows/ocicrypt_rs_build.yml b/.github/workflows/ocicrypt_rs_build.yml
index 4aa35c23a..b00478933 100644
--- a/.github/workflows/ocicrypt_rs_build.yml
+++ b/.github/workflows/ocicrypt_rs_build.yml
@@ -23,6 +23,7 @@ concurrency:
 
 jobs:
   ci:
+    if: github.event_name != 'push' || github.event.pull_request.merged == false
     name: Check
     runs-on: ubuntu-latest
     strategy: