diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 65dbd4a..528f88a 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -5,7 +5,8 @@ on:
     branches:
       - master
     tags:
-      - "v*"
+      # full semver only; the floating major tag (v1) must not trigger builds
+      - "v[0-9]*.[0-9]*.[0-9]*"
   pull_request:
     branches:
       - master
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 7fe34cd..37c0359 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -3,7 +3,8 @@ name: Goreleaser
 on:
   push:
     tags:
-      - "*"
+      # full semver only; the floating major tag (v1) must not cut a release
+      - "v[0-9]*.[0-9]*.[0-9]*"
 
 permissions:
   contents: write