diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
new file mode 100644
index 0000000000..a06b4bb0af
--- /dev/null
+++ b/.github/workflows/push.yaml
@@ -0,0 +1,45 @@
+---
+name: "Push Image"
+on: # yamllint disable-line rule:truthy
+  push:
+    tags:
+      - "*"
+permissions:
+  contents: "write"
+  packages: "write"
+env:
+  GO_VERSION: "~1.21.3"
+jobs:
+  push:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: authzed/actions/setup-go@main
+        with:
+          go-version: "${{ env.GO_VERSION }}"
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/${{ github.repository }}:${{ github.ref_name }}
+            ${{ github.repository }}:${{ github.ref_name }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e6a836d62c..01cedac44b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -3,7 +3,7 @@ name: "Release"
 on: # yamllint disable-line rule:truthy
   push:
     tags:
-      - "*"
+      - "v*[0-9].*[0-9].*[0-9]*(-rc*(.*[0-9]))"
 permissions:
   contents: "write"
   packages: "write"