diff --git a/.github/workflows/conformance-attestation.yml b/.github/workflows/conformance-attestation.yml
index cb59f9d..84e18e7 100644
--- a/.github/workflows/conformance-attestation.yml
+++ b/.github/workflows/conformance-attestation.yml
@@ -6,6 +6,10 @@ name: Conformance Attestation
 on:
   push:
     branches: [main, master]
+    # Do not re-run when cert-bot only refreshes repo-root conformance JSON (avoids push loops).
+    paths-ignore:
+      - "conformance-certificate.json"
+      - "conformance-report.json"
   workflow_dispatch:
 
 permissions: