diff --git a/.github/workflows/check-actions.yaml b/.github/workflows/check-actions.yaml
index a283bca..63aaf4b 100644
--- a/.github/workflows/check-actions.yaml
+++ b/.github/workflows/check-actions.yaml
@@ -7,10 +7,10 @@ permissions: {}
 on:
   pull_request:
     branches:
-      - main
+    - main
   push:
     branches:
-      - main
+    - main
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index b70b1b7..ba2be37 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -7,10 +7,10 @@ permissions: {}
 on:
   pull_request:
     branches:
-      - main
+    - main
   push:
     branches:
-      - main
+    - main
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/docs-main.yaml b/.github/workflows/docs-main.yaml
index 12e362b..3b11720 100644
--- a/.github/workflows/docs-main.yaml
+++ b/.github/workflows/docs-main.yaml
@@ -7,7 +7,7 @@ permissions: {}
 on:
   push:
     branches:
-      - main
+    - main
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/docs-release.yaml b/.github/workflows/docs-release.yaml
index 4ba99ce..4cd45d9 100644
--- a/.github/workflows/docs-release.yaml
+++ b/.github/workflows/docs-release.yaml
@@ -7,7 +7,7 @@ permissions: {}
 on:
   push:
     tags:
-      - 'docs-v*'
+    - 'docs-v*'
 
 jobs:
   docs:
diff --git a/.github/workflows/ko-publish.yaml b/.github/workflows/ko-publish.yaml
index e7ae2ec..320f7fd 100644
--- a/.github/workflows/ko-publish.yaml
+++ b/.github/workflows/ko-publish.yaml
@@ -7,7 +7,7 @@ permissions: {}
 on:
   push:
     tags:
-      - v*
+    - main
 
 jobs:
   ko-publish:
@@ -30,4 +30,4 @@ jobs:
     - name: Run ko
       run: |
         set -e
-        make publish-ko
+        KO_REGISTRY=ghcr.io/kyverno/kyverno-envoy-plugin make publish-ko
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 25e4e09..a41e471 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -7,10 +7,10 @@ permissions: {}
 on:
   pull_request:
     branches:
-      - main
+    - main
   push:
     branches:
-      - main
+    - main
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/semantics-pr.yaml b/.github/workflows/semantics-pr.yaml
index 009aaac..a77e2e8 100644
--- a/.github/workflows/semantics-pr.yaml
+++ b/.github/workflows/semantics-pr.yaml
@@ -23,9 +23,9 @@ name: Semantic PR Validation
 on:
   pull_request_target:
     types:
-      - opened
-      - edited
-      - synchronize
+    - opened
+    - edited
+    - synchronize
 
 defaults:
   run: