diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index 066bba3..beaf48c 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -180,7 +180,7 @@ jobs:
         if: steps.guard.outputs.skip != 'true' && steps.analyze.outputs.bump != 'none'
         env:
           NEW_TAG: ${{ steps.version.outputs.tag }}
-          GH_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           set -euo pipefail
           echo "Creating tag: $NEW_TAG"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9a40191..409e485 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,13 @@ name: ci
 on:
   push:
     branches: [main]
+    paths:
+      - "Dockerfile*"
+      - "docker-compose*.yml"
+      - ".dockerignore"
+      - "src/**"
+      - "*.dockerfile"
+      - ".github/workflows/ci.yml"
   workflow_dispatch:
 
 permissions: