diff --git a/.github/workflows/update-ecs-runner-qwen.yml b/.github/workflows/update-ecs-runner-qwen.yml
index 9f61067090..79ac566e71 100644
--- a/.github/workflows/update-ecs-runner-qwen.yml
+++ b/.github/workflows/update-ecs-runner-qwen.yml
@@ -1,6 +1,9 @@
 name: 'Update ECS Runner Qwen'
 
 on:
+  push:
+    branches: ['main']
+    paths: ['.github/workflows/update-ecs-runner-qwen.yml']
   workflow_dispatch:
     inputs:
       version:
diff --git a/scripts/tests/update-ecs-runner-qwen-workflow.test.js b/scripts/tests/update-ecs-runner-qwen-workflow.test.js
index 80e3b854fc..e4c0e41772 100644
--- a/scripts/tests/update-ecs-runner-qwen-workflow.test.js
+++ b/scripts/tests/update-ecs-runner-qwen-workflow.test.js
@@ -18,6 +18,12 @@ describe('ECS runner qwen update workflow', () => {
     expect(workflow).toContain('sudo env -u NPM_CONFIG_PREFIX npm install -g');
   });
 
+  it('runs only when this workflow changes on main', () => {
+    expect(workflow).toContain(
+      "  push:\n    branches: ['main']\n    paths: ['.github/workflows/update-ecs-runner-qwen.yml']",
+    );
+  });
+
   it('annotates a retry and a terminal failure distinctly', () => {
     // The final attempt must not log a "retrying" warning that never
     // retries; a sustained failure ends with an explicit exhausted error.