diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 117406f225..9de3929110 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,8 +11,6 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v2
-        with:
-          submodules: true
 
       - name: Shellcheck
         uses: reviewdog/action-shellcheck@v1
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 9dd6a51315..f7898805e5 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -1,8 +1,7 @@
-name: release
+name: draft release
 
 on:
   push:
-    # branches to consider in the event; optional, defaults to all
     branches:
       - main
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000000..ca92656c6b
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,27 @@
+name: release
+
+on:
+  workflow_dispatch: {}
+  # Execute every Sunday at 00:00.
+  schedule:
+    - cron: '0 0 * * 0'
+
+
+jobs:
+  update_draft:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get Latest Release
+        uses: InsonusK/get-latest-release@v1.0.1
+        id: release_id
+        with:
+          myToken: ${{ github.token }}
+          exclude_types: "prerelease|release"
+          view_top: 1
+
+      - name: Publish Release
+        uses: eregon/publish-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          release_id: ${{ steps.release_id.outputs.id }}
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 0fd3861f2e..b46056df69 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -4,6 +4,9 @@ on:
     branches:
       - main
   pull_request:
+    branches:
+      - main
+
 jobs:
   trivy:
     runs-on: ubuntu-latest
diff --git a/scripts/install.sh b/scripts/install.sh
index 64dc45a666..938d0c585c 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -16,7 +16,7 @@ export GITHUB_TOKEN="${GITHUB_TOKEN}"
 
 ## This will deep merge your kube config assuming you used the k8s-cluster-installation to bootstrap your cluster.
 ## You will need to modify the PATH to the location of the playbooks on your local machine.
-# KUBECONFIG=~/projects/install/ansible/playbooks/output/k8s-config.yaml:~/.kube/config kubectl config view --flatten > ~/.kube/config.tmp && \
+# KUBECONFIG=~/projects/k8s-cluster-installation/ansible/playbooks/output/k8s-config.yaml:~/.kube/config kubectl config view --flatten > ~/.kube/config.tmp && \
 #   mv ~/.kube/config.tmp ~/.kube/config
 
 flux >/dev/null || \