diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a319e737e67e..1a062571b3a3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -9,10 +9,15 @@ on:
     branches:
     - '*-main'
     - '*-ci'
+    paths-ignore:
+    - README*
+    - .github/workflows/build.yml
 
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+permissions: {} # none
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "build"
@@ -64,13 +69,17 @@ jobs:
           bash build.sh pack
 
       - name: Upload binaries to release
-        if: endsWith(github.ref,'-main') 
-        uses: marvinpinto/action-automatic-releases@latest
+        if: endsWith(github.ref,'-main')
+        uses: softprops/action-gh-release@v1
         with:
-          repo_token: "${{ secrets.GITHUB_TOKEN }}"
-          automatic_release_tag: "CI-BUILD-${{ env.BRANCH }}-${{ env.KERNELVER }}-${{ env.DT }}"
-          prerelease: false
-          title: "Build for branch ${{ env.BRANCH }} (${{ env.KERNELVER }})"
+          token: ${{ secrets.GITHUB_TOKEN }}
+          #draft: true
+          #prerelease: true
+          body_path: ${{ github.workspace }}-CHANGELOG.txt
+          body: ${{ github.sha }}-$BRANCH-$KERNELVER
+          tag_name: "CI-BUILD-${{ env.BRANCH }}-${{ env.KERNELVER }}-${{ env.DT }}"
+          target_commitish: ${{ github.sha }}
           files: |
-            debian/*.deb
             ../SD/*
+            ../*.deb
+            *.itb