diff --git a/.github/workflows/flowzone.yml b/.github/workflows/flowzone.yml
index f8fe292..2ee7502 100644
--- a/.github/workflows/flowzone.yml
+++ b/.github/workflows/flowzone.yml
@@ -4,15 +4,17 @@ on:
   pull_request:
     types: [opened, synchronize, closed]
     branches: [main, master]
-  # allow external contributions to use secrets within trusted code
   pull_request_target:
     types: [opened, synchronize, closed]
     branches: [main, master]
+  push:
+    tags:
+      - '*.*.*'
 
 jobs:
   flowzone:
     name: Flowzone
-    uses: product-os/flowzone/.github/workflows/flowzone.yml@6875845ba747463fd80d428600e9e51303e410df # v17.4.39
+    uses: product-os/flowzone/.github/workflows/flowzone.yml@ae54b290afa025d3420ba59001f333c2801b4944 # v19.9.32
     # prevent duplicate workflow executions for pull_request and pull_request_target
     if: |
       (
@@ -21,6 +23,8 @@ jobs:
       ) || (
         github.event.pull_request.head.repo.full_name != github.repository &&
         github.event_name == 'pull_request_target'
+      ) || (
+        github.event_name == 'push'
       )
 
     secrets:
diff --git a/Dockerfile b/Dockerfile
index f5db8df..8bbc17a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 FROM alpine
 
-RUN apk add --update --no-cache eudev dnsmasq grep && \
+RUN apk add --update --no-cache eudev dnsmasq grep kmod && \
   echo 'libcomposite' >> /etc/modules
 
 COPY entry.sh .