diff --git a/.gitea/workflows/publish.yaml b/.gitea/workflows/publish.yaml
index f18033b..3e6f004 100644
--- a/.gitea/workflows/publish.yaml
+++ b/.gitea/workflows/publish.yaml
@@ -8,19 +8,26 @@ jobs:
     runs-on: ubuntu-latest
     container: golang:1.24
     steps:
-       - name: Setup SSH
-         run: |
-           mkdir -p ~/.ssh
-           echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
-           chmod 600 ~/.ssh/id_rsa
-           ssh-keyscan gitea-ssh.engen.priv.no >> ~/.ssh/known_hosts
-       - name: Install node and go
-         run: apt update && apt -y install nodejs
-       - name: Check out repository code
-         uses: actions/checkout@v4
-       - name: ssh repo
-         run: git config --global url.git@gitea-ssh.engen.priv.no:.insteadOf https://gitea.engen.priv.no/
-       - name: Install ko
-         run: go install github.com/google/ko@latest
-       - name: Build
-         run: KO_DOCKER_REPO=registry.engen.priv.no/unifi-network-operator-controller PATH=~/go/bin:$PATH ko publish ./cmd --tags latest --bare
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          ssh-keyscan gitea-ssh.engen.priv.no >> ~/.ssh/known_hosts
+      - name: Install node and go
+        run: apt update && apt -y install nodejs
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - name: ssh repo
+        run: git config --global url.git@gitea-ssh.engen.priv.no:.insteadOf https://gitea.engen.priv.no/
+      - name: Install ko
+        run: go install github.com/google/ko@latest
+      - name: Extract tag
+        id: get_tag
+        run: |
+          echo "tag=${GITEA_REF##refs/tags/}" >> "$GITEA_OUTPUT"
+      - name: Build
+        env:
+          KO_DOCKER_REPO: registry.engen.priv.no/unifi-network-operator-controller
+          PATH: /go/bin:$PATH
+        run: ko publish ./cmd --tags "${{ steps.get_tag.outputs.tag }},latest"