turns out github releases require a tag, now it runs automatically for all tagged commits

.github/workflows/slsa-goreleaser.yml

@@ -1,6 +1,9 @@
 name: SLSA go releaser
 on:
   workflow_dispatch:
+  push:
+    tags:
+      - "*" 
 
 permissions: read-all
       
@@ -45,6 +48,7 @@ jobs:
           name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl
       - name: Release
         uses: softprops/action-gh-release@1e07f4398721186383de40550babbdf2b84acfc5
+        if: startsWith(github.ref, 'refs/tags/')
         with:
           files: |
             ${{ needs.build.outputs.go-binary-name }}