diff --git a/.github/workflows/deploy-ccs-worker.yml b/.github/workflows/deploy-ccs-worker.yml
index 6391e91f..d08900c4 100644
--- a/.github/workflows/deploy-ccs-worker.yml
+++ b/.github/workflows/deploy-ccs-worker.yml
@@ -8,9 +8,13 @@ on:
       - 'scripts/wrangler.toml'
       - 'installers/**'
 
-  # Run on all PRs to satisfy branch protection (no path filter)
+  # Only run on PRs that touch installer-related files
   pull_request:
     branches: [main]
+    paths:
+      - 'scripts/worker.js'
+      - 'scripts/wrangler.toml'
+      - 'installers/**'
 
   # Allow manual trigger
   workflow_dispatch: