diff --git a/.github/workflows/docker-runner-check.yml b/.github/workflows/docker-runner-check.yml
index d1b21ed19c8..8df835d6838 100644
--- a/.github/workflows/docker-runner-check.yml
+++ b/.github/workflows/docker-runner-check.yml
@@ -28,7 +28,8 @@ on:
 permissions: {}
 
 concurrency:
-  group: docker-runner-check-${{ github.event.pull_request.number || github.ref }}
+  # Publishing a newer image must not discard an earlier verification's evidence.
+  group: docker-runner-check-${{ github.event.pull_request.number || github.ref }}-${{ inputs.verify_source && 'verification' || 'image' }}
   cancel-in-progress: true
 
 jobs: