diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 61fd83d..456f3a3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -94,11 +94,12 @@ jobs:
             - test
         permissions:
             packages: write
-            contents: read
+            contents: write
         runs-on: ubuntu-latest
         timeout-minutes: 10
 
         steps:
+            - uses: actions/checkout@v3
             - name: Login to GitHub Container Registry
               uses: docker/login-action@v2
               with:
@@ -114,7 +115,7 @@ jobs:
                   tags: |
                       type=edge
                       type=raw,value={{tag}},enable=${{ github.ref_type == 'tag' && ! startsWith(github.ref_name, 'v') }}
-                      type=match,pattern=v(\d{4}\.\d{4}(-.+)?),group=1
+                      type=match,pattern=v(\d{4}\.\d{2}.\d+(-.+)?),group=1
 
             - name: Release image
               uses: akhilerm/tag-push-action@v2.0.0
diff --git a/bumpver.toml b/bumpver.toml
new file mode 100644
index 0000000..2b1650e
--- /dev/null
+++ b/bumpver.toml
@@ -0,0 +1,12 @@
+[bumpver]
+current_version = "v2022.12.1-alpha"
+version_pattern = "vYYYY.0M.PATCH[-TAG]"
+commit_message = "Bump version {old_version} -> {new_version}"
+commit = true
+tag = true
+push = true
+
+[bumpver.file_patterns]
+"bumpver.toml" = [
+    'current_version = "{version}"'
+]