diff --git a/.github/chainguard/release.sts.yaml b/.github/chainguard/release.sts.yaml
index d19b0ac648..2c10bd2b49 100644
--- a/.github/chainguard/release.sts.yaml
+++ b/.github/chainguard/release.sts.yaml
@@ -1,7 +1,7 @@
 issuer: https://token.actions.githubusercontent.com
-subject: repo:shopware/shopware:ref:refs/heads/trunk
+subject_pattern: repo:shopware/shopware:ref:refs/tags/v[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
 claim_pattern:
-  job_workflow_ref: shopware/shopware/.github/workflows/05-release.yml@refs/heads/trunk
+  job_workflow_ref: shopware/shopware/.github/workflows/05-publish-release.yml@refs/tags/v[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
 
 permissions:
   actions: write