diff --git a/.github/workflows/check_certs.yml b/.github/workflows/check_certs.yml
index 243858363..0b1b3a53c 100644
--- a/.github/workflows/check_certs.yml
+++ b/.github/workflows/check_certs.yml
@@ -49,11 +49,11 @@ jobs:
             echo "new_certificate_needed=false" >> $GITHUB_OUTPUT
           fi
 
-  # Nuke Certs if needed
+  # Nuke Certs if needed, and if the repository variable ENABLE_NUKE_CERTS is set to 'true' (without quotes)
   nuke_certs:
     needs: check_certs
     runs-on: macos-14 
-    if: ${{ needs.check_certs.outputs.new_certificate_needed == 'true' }}
+    if: ${{ needs.check_certs.outputs.new_certificate_needed == 'true' && vars.ENABLE_NUKE_CERTS == 'true' }}
     steps:
       - name: Debug check_certs output
         run: echo "new_certificate_needed=${{ needs.check_certs.outputs.new_certificate_needed }}"