diff --git a/.github/workflows/docker_publish.yaml b/.github/workflows/docker_publish.yaml
index e889d477cb..02244cf77f 100644
--- a/.github/workflows/docker_publish.yaml
+++ b/.github/workflows/docker_publish.yaml
@@ -21,7 +21,13 @@ jobs:
       matrix:
         version: [20.13.1-alpine]
     steps:
+      - name: Checkout tag v${{ inputs.version }}
+        if: ${{ inputs.version != '' }}
+        uses: actions/checkout@v4
+        with:
+          ref: v${{ inputs.version }} # tag that should be created by the caller workflow
       - name: Checkout
+        if: ${{ inputs.version == '' }}
         uses: actions/checkout@v4
       - name: Setup QEmu so we can build multiplatform
         uses: docker/setup-qemu-action@v2
diff --git a/.github/workflows/publish-new-version.yaml b/.github/workflows/publish-new-version.yaml
index 2c8b543727..1d060984bc 100644
--- a/.github/workflows/publish-new-version.yaml
+++ b/.github/workflows/publish-new-version.yaml
@@ -113,12 +113,14 @@ jobs:
   publish-docker:
     needs: build
     uses: ./.github/workflows/docker_publish.yaml
+    secrets: inherit
     with:
       version: ${{ github.event.inputs.version }}
   
   publish-npm:
     needs: build
     uses: ./.github/workflows/release.yaml
+    secrets: inherit
     with:
       version: ${{ github.event.inputs.version }}
 
@@ -132,5 +134,6 @@ jobs:
     needs: publish-docker
     if: ${{ github.event.inputs.update-version-function == 'true' }}
     uses: ./.github/workflows/update_version_for_version_checker.yml
+    secrets: inherit
     with:
       version: ${{ github.event.inputs.version }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f69c61c7c7..061d911714 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -17,6 +17,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: v${{ inputs.version }} # tag that should be created by the caller workflow
       - name: Setup to npm
         uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/release_changelog.yml b/.github/workflows/release_changelog.yml
index ac4f6a2936..b1b7ee0f6d 100644
--- a/.github/workflows/release_changelog.yml
+++ b/.github/workflows/release_changelog.yml
@@ -13,6 +13,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: v${{ inputs.version }} # tag that should be created by the caller workflow
       - name: Build changelog
         id: github_release
         uses: metcalfc/changelog-generator@v4.3.1