diff --git a/Jenkinsfile b/Jenkinsfile
index 8b07fca..7cbb3d2 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -12,19 +12,25 @@
         checkout scm
     }
 
-    stage('Build') {
-        docker.build('jenkins')
-    }
+    if (!infra.isTrusted()) {
+        /* Outside of the trusted.ci environment, we're building and testing
+         * the Dockerful in this repository, but not publishing to docker hub
+         */
+        stage('Build') {
+            docker.build('jenkins')
+        }
 
-    stage('Test') {
-        sh """
-        git submodule update --init --recursive
-        git clone https://github.com/sstephenson/bats.git
-        bats/bin/bats tests
-        """
-    }
-
-    if (infra.isTrusted()) {
+        stage('Test') {
+            sh """
+            git submodule update --init --recursive
+            git clone https://github.com/sstephenson/bats.git
+            bats/bin/bats tests
+            """
+        }
+    } else {
+        /* In our trusted.ci environment we only want to be publishing our
+         * containers from artifacts
+         */
         stage('Publish') {
             sh './publish.sh'
         }