diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml
index 6c5c0aa..2cfbdb0 100644
--- a/.github/workflows/docker-release.yml
+++ b/.github/workflows/docker-release.yml
@@ -6,11 +6,24 @@ on:
       - main
     tags:
       - 'v*'
+    paths:
+      - 'Dockerfile'
+      - 'Dockerfile.alpine'
+      - 'OPENCLAW_VERSION'
+      - '.github/workflows/docker-release.yml'
   pull_request:
     branches:
       - main
+    paths:
+      - 'Dockerfile'
+      - 'Dockerfile.alpine'
+      - '.github/workflows/docker-release.yml'
   workflow_dispatch:
 
+concurrency:
+  group: docker-release-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   validate:
     if: github.event_name == 'pull_request'
diff --git a/README.md b/README.md
index b0be271..e4c117b 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ Alpine tags are currently published for:
 
 [![Build & Push to Docker Hub](https://github.com/Molten-Bot/openclaw/actions/workflows/docker-release.yml/badge.svg)](https://github.com/Molten-Bot/openclaw/actions/workflows/docker-release.yml)
 
-Pull requests run the Docker build matrix as validation; only `main` pushes and `v*` tags publish images to Docker Hub.
+Pull requests that change Dockerfiles or this workflow run the Docker build matrix as validation; `OPENCLAW_VERSION`-only changes build on `main` push. Only `main` pushes and `v*` tags publish images to Docker Hub.
 
 ## Usage