diff --git a/.github/workflows/sync-mirrors.yml b/.github/workflows/sync-mirrors.yml
index cad877d6c3..3dfd21e16a 100644
--- a/.github/workflows/sync-mirrors.yml
+++ b/.github/workflows/sync-mirrors.yml
@@ -9,6 +9,12 @@ on:
   delete:
   workflow_dispatch:
 
+# Mirror providers reject concurrent forced updates to the same ref. Serialize all
+# branch, tag, and delete events so rapid GitHub pushes cannot race each other.
+concurrency:
+  group: sync-mirrors
+  cancel-in-progress: false
+
 jobs:
   sync-cnb:
     name: Sync to CNB