diff --git a/.github/workflows/create-release.yaml b/.github/workflows/create-release.yaml
index 79eb7cb9..44f112d5 100644
--- a/.github/workflows/create-release.yaml
+++ b/.github/workflows/create-release.yaml
@@ -1,18 +1,15 @@
 name: create_release
 on:
-  workflow_dispatch:
-  pull_request:
-    branches:
-      - main
-      - release-**
-    types: [closed]
+on:
+  push:
+    tags:
+      - 'v*'
 
 permissions:
   contents: write
 
 jobs:
   create-release:
-    if: github.event.pull_request.merged == true && contains(github.event.pull_request.title, 'update manifest and helm charts')
     runs-on: ubuntu-20.04
     steps:
       - name: Harden Runner
@@ -28,12 +25,6 @@ jobs:
         with:
           go-version: "1.23"
           check-latest: true
-      - id: get-tag
-        name: Get tag
-        run: echo "tag=$(echo ${{ github.event.pull_request.head.ref }} | sed -e 's/release-//g')" >> $GITHUB_OUTPUT
-      - name: Create tag
-        run: |
-          git tag ${{ steps.get-tag.outputs.tag }}
       - name: Goreleaser
         uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7 # v4.3.0
         with:
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index ca79bb84..cfea855b 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -63,7 +63,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: SARIF file
           path: results.sarif