diff --git a/.github/workflows/deploy.sh b/.github/workflows/deploy.sh
index 05198fe..58a416b 100644
--- a/.github/workflows/deploy.sh
+++ b/.github/workflows/deploy.sh
@@ -2,7 +2,7 @@
 set -e
 
 # Create SSH key file with proper handling, stripping Windows-style line endings
-printf '%s' "$SSH_KEY" | tr -d '\r' > key.pem
+printf '%s\n' "$SSH_KEY" | tr -d '\r' > key.pem
 chmod 600 key.pem
 
 # Verify key file was created properly
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c07064a..18f660d 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -43,6 +43,7 @@ jobs:
           go build -ldflags="-X 'main.gitHash=${{ github.sha }}' -X 'main.buildTime=${{ env.buildTime }}'" -o unchain .
 
       - name: Deploy to AliCloud ECS
+        if: github.event_name == 'push'
         env:
           SSH_HOST: ${{ secrets.ECS_HOST }}
           SSH_USER: ${{ secrets.ECS_USER }}