diff --git a/.github/workflows/pr-dep-review.yml b/.github/workflows/pr-dep-review.yml
index 681adb1..8e226ae 100644
--- a/.github/workflows/pr-dep-review.yml
+++ b/.github/workflows/pr-dep-review.yml
@@ -23,6 +23,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.github.com:443
+            api.securityscorecards.dev:443
             github.com:443
             objects.githubusercontent.com:443
             proxy.golang.org:443
diff --git a/.goreleaser.yml b/.goreleaser.yml
index d07c803..fb37711 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -114,12 +114,6 @@ changelog:
   disable: false
   use: github-native
 
-# https://goreleaser.com/customization/source/
-source:
-  enabled: true
-  name_template: '{{ .ProjectName }}-src'
-  format: tar.gz
-
 # https://goreleaser.com/customization/archive/
 archives:
   - id: 'linux-archive'
@@ -257,3 +251,6 @@ brews:
       branch: main
       token: '{{ .Env.GH_PUBLIC_TOKEN }}'
       # token_type: 'github'
+    git:
+      url: 'git@github.com:northwood-labs/{{ .ProjectName }}.git'
+      private_key: '{{ .Env.PRIVATE_KEY_PATH }}'