diff --git a/.azure-pipelines/publish.yml b/.azure-pipelines/publish.yml
index 627b3dcdcf..79172ce5ab 100644
--- a/.azure-pipelines/publish.yml
+++ b/.azure-pipelines/publish.yml
@@ -9,25 +9,28 @@ stages:
 - stage: Release
   dependsOn: []
   jobs:
-  - job: onnxscript_publish
+  - deployment: onnxscript_publish
     environment:
       name: 'onnxscript-release'
     pool:
       vmImage: 'ubuntu-latest'
-    steps:
-    - download: onnxscript-release
-      artifact: drop
-    - task: EsrpRelease@9
-      displayName: 'ESRP Release'
-      inputs:
-        connectedservicename: esrp_release
-        keyvaultname: 'ortbuildkeyvault'
-        signcertname: 'esrpcodesign'
-        clientid: '53d54d02-978d-4305-8572-583cf6711c4f'
-        contenttype: PyPi
-        folderlocation: '$(Pipeline.Workspace)/onnxscript-release/drop'
-        owners: 'justinchu@microsoft.com'
-        approvers: 'grama@microsoft.com'
-        mainpublisher: AIFrameworks
-        usemanagedidentity: true
-        domaintenantid: '975f013f-7f24-47e8-a7d3-abc4752bf346'
+    strategy:
+      runOnce:
+        deploy:
+          steps:
+          - download: onnxscript-release
+            artifact: drop
+          - task: EsrpRelease@9
+            displayName: 'ESRP Release'
+            inputs:
+              connectedservicename: esrp_release
+              keyvaultname: 'ortbuildkeyvault'
+              signcertname: 'esrpcodesign'
+              clientid: '53d54d02-978d-4305-8572-583cf6711c4f'
+              contenttype: PyPi
+              folderlocation: '$(Pipeline.Workspace)/onnxscript-release/drop'
+              owners: 'justinchu@microsoft.com'
+              approvers: 'grama@microsoft.com'
+              mainpublisher: AIFrameworks
+              usemanagedidentity: true
+              domaintenantid: '975f013f-7f24-47e8-a7d3-abc4752bf346'