diff --git a/.github/workflows/build-os-image.yml b/.github/workflows/build-os-image.yml
index 7ade256a1..ea5dd7c0b 100644
--- a/.github/workflows/build-os-image.yml
+++ b/.github/workflows/build-os-image.yml
@@ -711,6 +711,7 @@ jobs:
   upload-pcrs:
     name: "Sign & upload PCRs"
     needs: [build-settings, calculate-pcrs]
+    if: inputs.stream != 'debug'
     permissions:
       id-token: write
       contents: read