diff --git a/workflow-templates/release.yml b/workflow-templates/release.yml
index 8c1e938..9f13cb3 100644
--- a/workflow-templates/release.yml
+++ b/workflow-templates/release.yml
@@ -1,8 +1,8 @@
 name: Release
 on:
-  push: { tags: "v*.*.*" }
+  push: { tags: "v[0-9]+.[0-9]+.[0-9]+*" }
 
 jobs:
   github:
-    runs-on: ubuntu-latest
+    permissions: { contents: write }
     uses: nodenv/.github/.github/workflows/release.yml@main