diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 89846eaac6..1ae76f18ad 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,11 +1,24 @@
 name: Release & Publish
 
 on:
-    push:
-        tags:
-            - "v*"
+    release:
+        types: [published]
     workflow_dispatch:
 
+permissions:
+    contents: write
+    packages: write
+    actions: read
+    checks: read
+    deployments: read
+    discussions: read
+    issues: read
+    pages: read
+    pull-requests: read
+    repository-projects: read
+    security-events: read
+    statuses: read
+
 jobs:
     test:
         uses: ./.github/workflows/test.yml