diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a7af0d1..a7857d5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,12 +1,19 @@
-name: release
+name: Release
 
 on:
+  pull_request:
+  push:
+    branches: ["master"]
   release:
     types: ["published"]
 
 jobs:
   build:
+    if: ${{ github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -18,13 +25,14 @@ jobs:
           images: |
             docker.io/keglin/pinchflat
             ghcr.io/${{ github.repository }}
-          flavor: |
-            latest=true
-            prefix=v
           tags: |
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-            type=semver,pattern={{major}}
+            type=semver,pattern={{version}},prefix=v
+            type=semver,pattern={{major}}.{{minor}},prefix=v
+            type=semver,pattern={{major}},prefix=v
+            type=ref,event=branch
+            type=ref,event=pr
+          flavor: |
+            latest=auto
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3