Fix MyGet publishing

Fix incorrectly edited condition so that packages go to MyGet, but attestation only happens for tagged builds.

Author: martincostello

.github/workflows/build.yml

@@ -87,10 +87,7 @@ jobs:
       if: |
         runner.os == 'Windows' &&
         github.event.repository.fork == false &&
-        (github.ref_name == github.event.repository.default_branch ||
-         startsWith(github.ref, 'refs/heads/dev') ||
-         startsWith(github.ref, 'refs/heads/rel/') ||
-         startsWith(github.ref, 'refs/tags/'))
+        startsWith(github.ref, 'refs/tags/')
       with:
         subject-path: |
           ./artifacts/bin/AspNet.Security.*/Release/**/AspNet.Security.*.dll
@@ -153,7 +150,10 @@ jobs:
     runs-on: ubuntu-latest
     if: |
       github.event.repository.fork == false &&
-      startsWith(github.ref, 'refs/tags/')
+      (github.ref_name == github.event.repository.default_branch ||
+       startsWith(github.ref, 'refs/heads/dev') ||
+       startsWith(github.ref, 'refs/heads/rel/') ||
+       startsWith(github.ref, 'refs/tags/'))
     steps:
 
     - name: Download packages