[ci] Fix federated safety check (#3417)

[ci] Fix federated safety check
diff --git a/.cirrus.yml b/.cirrus.yml
index 73a843d..2dc4900 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -122,9 +122,9 @@
           # This check is only meaningful for PRs, as it validates changes
           # rather than state.
           - if [[ $CIRRUS_PR == "" ]]; then
-          -   ./script/tool_runner.sh federation-safety-check
-          - else
           -   echo "Only run in presubmit"
+          - else
+          -   ./script/tool_runner.sh federation-safety-check
           - fi
     - name: analyze
       env: