diff --git a/.github/workflows/build-vineyardd.yaml b/.github/workflows/build-vineyardd.yaml
index 5cfc094d0..41e059265 100644
--- a/.github/workflows/build-vineyardd.yaml
+++ b/.github/workflows/build-vineyardd.yaml
@@ -70,9 +70,25 @@ jobs:
           sudo docker push docker.pkg.github.com/alibaba/libvineyard/vineyardd:alpine-latest
           sudo docker push docker.pkg.github.com/alibaba/libvineyard/vineyardd:latest
 
-      - name: Upload wheels to latest release
+      - name: Extract tag name
+        id: tag
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+        run: echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}
+
+      - nam: Tag and upload docker for releases
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'alibaba/libvineyard' }}
+        run: |
+          sudo docker tag docker.pkg.github.com/alibaba/libvineyard/vineyardd:alpine-${{ github.sha }} \
+                          docker.pkg.github.com/alibaba/libvineyard/vineyardd:alpine-${{ steps.tag.outputs.TAG }}
+          sudo docker tag docker.pkg.github.com/alibaba/libvineyard/vineyardd:alpine-${{ github.sha }} \
+                          docker.pkg.github.com/alibaba/libvineyard/vineyardd:${{ steps.tag.outputs.TAG }}
+
+          sudo docker push docker.pkg.github.com/alibaba/libvineyard/vineyardd:alpine-${{ steps.tag.outputs.TAG }}
+          sudo docker push docker.pkg.github.com/alibaba/libvineyard/vineyardd:${{ steps.tag.outputs.TAG }}
+
+      - name: Upload vineyardd to latest release
         uses: svenstaro/upload-release-action@v2
-        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main'}}
+        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' && github.repository == 'alibaba/libvineyard' }}
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: vineyardd.${{ runner.os }}-generic.${{ github.sha }}.tar.gz
@@ -82,18 +98,13 @@ jobs:
           overwrite: true
           body: "prerelease for latest vineyard"
 
-      - name: Extract tag name
-        id: tag
-        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
-        run: echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}
-
-      - name: Upload wheels to tagged release
+      - name: Upload vineyardd to tagged release
         uses: svenstaro/upload-release-action@v2
-        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'alibaba/libvineyard' }}
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: vineyardd.${{ runner.os }}-generic.${{ github.sha }}.tar.gz
-          asset_name: vineyardd-latest-linux_x86-64.tar.gz
+          asset_name: vineyardd-${{ steps.tag.outputs.TAG }}-linux_x86-64.tar.gz
           tag: ${{ steps.tag.outputs.TAG }}
           prerelease: false
           overwrite: true
diff --git a/.github/workflows/build-wheel.yml b/.github/workflows/build-wheel.yml
index 3e286d1dc..e491becbe 100644
--- a/.github/workflows/build-wheel.yml
+++ b/.github/workflows/build-wheel.yml
@@ -214,9 +214,14 @@ jobs:
           cat ./vineyard.pypi.${{ runner.os }}.${{ matrix.python }}.${{ github.sha }}.sha512sum
           tar zcvfh vineyard.pypi.${{ runner.os }}.${{ matrix.python }}.${{ github.sha }}.tar.gz ./fixed_wheels vineyard.pypi.${{ runner.os }}.${{ matrix.python }}.${{ github.sha }}.sha512sum
 
+      - name: Extract tag name
+        id: tag
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+        run: echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}
+
       - name: Upload wheels to latest release
         uses: svenstaro/upload-release-action@v2
-        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main'}}
+        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' && github.repository == 'alibaba/libvineyard' }}
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: fixed_wheels/*.whl
@@ -226,14 +231,9 @@ jobs:
           overwrite: true
           body: "prerelease for latest vineyard"
 
-      - name: Extract tag name
-        id: tag
-        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
-        run: echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}
-
       - name: Upload wheels to tagged release
         uses: svenstaro/upload-release-action@v2
-        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'alibaba/libvineyard' }}
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: fixed_wheels/*.whl
diff --git a/.github/workflows/release-latest.yml b/.github/workflows/release-latest.yml
index 98bf6d311..db0b76688 100644
--- a/.github/workflows/release-latest.yml
+++ b/.github/workflows/release-latest.yml
@@ -46,12 +46,12 @@ jobs:
 
       - name: Extract tag name
         id: tag
-        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'alibaba/libvineyard' }}
         run: echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}
 
       - name: Cut a versioned release
         uses: "marvinpinto/action-automatic-releases@latest"
-        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+        if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'alibaba/libvineyard' }}
         with:
           repo_token: "${{ secrets.GITHUB_TOKEN }}"
           automatic_release_tag: ${{ steps.tag.outputs.TAG }}