Fix

Signed-off-by: Steven Sheehy <steven.sheehy@swirldslabs.com>

Author: steven-sheehy

.github/workflows/security.yaml

@@ -30,6 +30,7 @@ concurrency:
 
 jobs:
   codeql:
+    if: github.ref == 'refs/heads/main'
     name: CodeQL
     runs-on: transaction-tools-linux-medium
     permissions:
@@ -81,6 +82,7 @@ jobs:
         run: pnpm audit --audit-level=high
 
   semgrep:
+    if: github.ref == 'refs/heads/main'
     name: Semgrep
     permissions:
       security-events: write  # Required for uploading SARIF