diff --git a/.gitea/workflows/build-and-publish.yml b/.gitea/workflows/build-and-publish.yml
index a604c8a..fa62493 100644
--- a/.gitea/workflows/build-and-publish.yml
+++ b/.gitea/workflows/build-and-publish.yml
@@ -1,10 +1,31 @@
 name: Build and publish container
 
+# Only run when files that affect the built image change. Updates to CI
+# config, Renovate config, or docs (e.g. a Renovate bump of the checkout
+# action) do not change the image and so do not trigger a build or release.
+# Use workflow_dispatch to run manually after a pipeline change.
 on:
   push:
     branches: [main]
+    paths:
+      - 'Dockerfile'
+      - 'default.conf'
+      - 'index.html'
+      - 'styles.css'
+      - 'script.js'
+      - 'messages.js'
+      - '.dockerignore'
   pull_request:
     branches: [main]
+    paths:
+      - 'Dockerfile'
+      - 'default.conf'
+      - 'index.html'
+      - 'styles.css'
+      - 'script.js'
+      - 'messages.js'
+      - '.dockerignore'
+  workflow_dispatch:
 
 defaults:
   run: