diff --git a/.woodpecker/build.yml b/.woodpecker/build.yml
index d76995d..00097b2 100644
--- a/.woodpecker/build.yml
+++ b/.woodpecker/build.yml
@@ -5,6 +5,9 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
       - renovate/*
 
+depends_on:
+  - lint
+
 steps:
   # use vendor to cache dependencies
   vendor:
@@ -19,7 +22,10 @@ steps:
       - go version
       - just build
     when:
-      event: ["pull_request", "push"]
+      - event: [push, pull_request]
+        branch:
+          - ${CI_REPO_DEFAULT_BRANCH}
+          - renovate/*
 
   docker-dryrun:
     depends_on: vendor
@@ -29,8 +35,11 @@ steps:
       no_push: true
       tags: latest
     when:
-      event: ["pull_request", "push"]
-      path: Dockerfile
+      - event: [push, pull_request]
+        branch:
+          - ${CI_REPO_DEFAULT_BRANCH}
+          - renovate/*
+        path: Dockerfile
 
   build-tag:
     depends_on: vendor
@@ -39,13 +48,19 @@ steps:
       - go version
       - just build-tag ${CI_COMMIT_TAG##v}
     when:
-      event: ["tag"]
+      - event: ["tag"]
+        branch:
+          - ${CI_REPO_DEFAULT_BRANCH}
 
   test:
     depends_on: build
     image: codeberg.org/6543/docker-images/golang_just
     commands:
       - just test
+    when:
+      - event: pull_request
+      - event: push
+        branch: renovate/*
 
   integration-tests:
     depends_on: build
@@ -57,6 +72,10 @@ steps:
       - PAGES_DOMAIN=localhost.mock.directory
       - RAW_DOMAIN=raw.localhost.mock.directory
       - PORT=4430
+    when:
+      - event: pull_request
+      - event: push
+        branch: renovate/*
 
   release:
     depends_on: build
@@ -73,7 +92,9 @@ steps:
       - CI_BUILD_EVENT=${CI_BUILD_EVENT}
       - CI_COMMIT_REF=${CI_COMMIT_REF}
     when:
-      event: ["tag"]
+      - event: ["tag"]
+        branch:
+          - ${CI_REPO_DEFAULT_BRANCH}
 
   docker-next:
     depends_on: vendor
@@ -88,8 +109,8 @@ steps:
       password:
         from_secret: bot_token
     when:
-      event: ["push"]
-      branch: ${CI_REPO_DEFAULT_BRANCH}
+      - event: ["push"]
+        branch: ${CI_REPO_DEFAULT_BRANCH}
 
   docker-tag:
     depends_on: vendor
@@ -104,4 +125,5 @@ steps:
       password:
         from_secret: bot_token
     when:
-      event: ["tag"]
+      - event: ["push"]
+        branch: ${CI_REPO_DEFAULT_BRANCH}
diff --git a/.woodpecker/lint.yml b/.woodpecker/lint.yml
index 88e7f39..55a9fe5 100644
--- a/.woodpecker/lint.yml
+++ b/.woodpecker/lint.yml
@@ -1,9 +1,7 @@
 when:
-  - event: [pull_request, tag, cron]
+  - event: pull_request
   - event: push
-    branch:
-      - ${CI_REPO_DEFAULT_BRANCH}
-      - renovate/*
+    branch: renovate/*
 
 steps:
   lint:
@@ -15,7 +13,15 @@ steps:
       - go install mvdan.cc/gofumpt@latest
       - "[ $(gofumpt -extra -l . | wc -l) != 0 ] && { echo 'code not formated'; exit 1; }"
       - golangci-lint run --timeout 5m --build-tags integration
+    when:
+      - event: pull_request
+      - event: push
+        branch: renovate/*
 
   editor-config:
     depends_on: []
     image: mstruebing/editorconfig-checker:2.7.2
+    when:
+      - event: pull_request
+      - event: push
+        branch: renovate/*