diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1b060d6d..0262f059 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,14 +1,17 @@
 name: Publish
 
 on:
-  # release:
+  release:
   # workflow_dispatch:
   # workflow_call:
   push:
     # branches:
     #   - main
     tags:
-      - "*"
+      - 'v*'
+
+permissions:
+  contents: read
 
 jobs:
   build-gui:
@@ -17,7 +20,9 @@ jobs:
     uses: ./.github/workflows/build_cli_artifacts.yml
 
   release:
+    name: Release
     runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/')
     needs: [ build-gui, build-cli]
     steps:
       - uses: actions/checkout@v3
@@ -26,7 +31,6 @@ jobs:
         with:
           path: bin
       - name: Create pre-release
-        # if: startsWith(github.ref, 'refs/tags/') # TODO
         uses: softprops/action-gh-release@v1
         with:
           files: bin/*/xmodits-*