diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
index 3d5ff49..e3621c3 100644
--- a/.github/workflows/build-publish.yml
+++ b/.github/workflows/build-publish.yml
@@ -5,11 +5,6 @@ on:
   release:
     types:
       - published
-  push:
-    branches:
-      - main
-    tags:
-      - 'v[0-9]+*'
   workflow_dispatch:
 
 env:
@@ -81,6 +76,10 @@ jobs:
         uses: docker/metadata-action@v5.5.1
         with:
           images: ${{ env.REGISTRY }}/${{ env.REPO_NAME }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=semver,pattern=v{{version}},event=tag
+            type=semver,pattern=v{{major}}.{{minor}},event=tag
+            type=semver,pattern=v{{major}},event=tag
       # Build and push Docker image with Buildx (don't push on PR)
       # https://github.com/docker/build-push-action
       - name: Build and push container image
diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml
index d3625b1..06616a7 100644
--- a/.github/workflows/release-please.yaml
+++ b/.github/workflows/release-please.yaml
@@ -22,6 +22,7 @@ jobs:
           # this is a built-in strategy in release-please, see "Action Inputs"
           # for more options
           release-type: simple
+          token: ${{ secrets.RP_TOKEN }}
       - uses: actions/checkout@v4.2.0
       - name: Tag major and minor versions
         if: ${{ steps.release.outputs.release_created }}