diff --git a/.github/workflows/checks-macos.yml b/.github/workflows/checks-macos.yml
index e333f9f4..ed72e851 100644
--- a/.github/workflows/checks-macos.yml
+++ b/.github/workflows/checks-macos.yml
@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Install tools via asdf
-        uses: asdf-vm/actions/setup@v1.1.0
+        uses: asdf-vm/actions/setup@master
         with:
           asdf_branch: v0.11.0
 
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 88796a5c..7f9965ad 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Install asdf
-        uses: asdf-vm/actions/setup@v1.1.0
+        uses: asdf-vm/actions/setup@master
         with:
           asdf_branch: v0.11.0
 
@@ -48,7 +48,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install asdf
-        uses: asdf-vm/actions/setup@v1.1.0
+        uses: asdf-vm/actions/setup@master
         with:
           asdf_branch: v0.11.0
 
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index a28d0b22..3a657cc2 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -31,7 +31,7 @@ jobs:
         languages: ${{ matrix.language }}
 
     - name: Install tools via asdf
-      uses: asdf-vm/actions/install@v1.1.0
+      uses: asdf-vm/actions/install@master
       with:
         asdf_branch: v0.11.0
 
diff --git a/.github/workflows/release-main.yaml b/.github/workflows/release-main.yaml
index 21296ab6..2f3dcf8d 100644
--- a/.github/workflows/release-main.yaml
+++ b/.github/workflows/release-main.yaml
@@ -8,9 +8,14 @@ on:
     branches:
       - main
 
+permissions:
+  contents: write
+  packages: write
+  pull-requests: write
+
 jobs:
   release-please:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: google-github-actions/release-please-action@v3.7
         id: release-please
@@ -27,16 +32,17 @@ jobs:
 
       - if: ${{ steps.release-please.outputs.release_created }}
         name: Install tools via asdf
-        uses: asdf-vm/actions/setup@v1.1.0
+        uses: asdf-vm/actions/setup@master
         with:
           asdf_branch: v0.11.0
 
       - if: ${{ steps.release-please.outputs.release_created }}
-        name: Login to Docker Hub
+        name: Login to GitHub Container Registry
         uses: docker/login-action@v2
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor  }}
+          password: ${{ secrets.GITHUB_TOKEN  }}
 
       - if: ${{ steps.release-please.outputs.release_created }}
         name: Release
diff --git a/.goreleaser.yml b/.goreleaser.yml
index ceec0e10..e0bacc56 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -57,16 +57,17 @@ archives:
         format: zip
     builds:
       - mindthegap
+    rlcp: true
 dockers:
   - image_templates:
       # Specify the image tag including `-amd64` suffix if the build is not a snapshot build or is not being built on
       # arm64 machine. This allows for using the snapshot image build without the archtecture specific suffix
-      # consistently on local machines, i.e. can always use `mesosphere/mindthegap:v<VERSION>` on the machine the snapshot
+      # consistently on local machines, i.e. can always use `ghcr.io/mesosphere/mindthegap:v<VERSION>` on the machine the snapshot
       # is built on.
       #
       # For a release build the `-amd64` suffix will always be included and the `docker_manifests` specification below
       # will create the final multiplatform manifest to be pushed to the registry.
-      - 'mesosphere/mindthegap:v{{trimprefix .Version "v"}}{{ if or (not .IsSnapshot) (not (eq .Runtime.Goarch "amd64")) }}-amd64{{ end }}'
+      - 'ghcr.io/mesosphere/mindthegap:v{{trimprefix .Version "v"}}{{ if or (not .IsSnapshot) (not (eq .Runtime.Goarch "amd64")) }}-amd64{{ end }}'
     use: buildx
     dockerfile: Dockerfile
     build_flag_templates:
@@ -80,12 +81,12 @@ dockers:
   - image_templates:
       # Specify the image tag including `-amd64v8` suffix if the build is not a snapshot build or is not being built on
       # arm64 machine. This allows for using the snapshot image build without the archtecture specific suffix
-      # consistently on local machines, i.e. can always use `mesosphere/mindthegap:v<VERSION>` on the machine the snapshot
+      # consistently on local machines, i.e. can always use `ghcr.io/mesosphere/mindthegap:v<VERSION>` on the machine the snapshot
       # is built on.
       #
       # For a release build the `-amd64v8` suffix will always be included and the `docker_manifests` specification below
       # will create the final multiplatform manifest to be pushed to the registry.
-    - 'mesosphere/mindthegap:v{{trimprefix .Version "v"}}{{ if or (not .IsSnapshot) (not (eq .Runtime.Goarch "arm64")) }}-arm64v8{{ end }}'
+    - 'ghcr.io/mesosphere/mindthegap:v{{trimprefix .Version "v"}}{{ if or (not .IsSnapshot) (not (eq .Runtime.Goarch "arm64")) }}-arm64v8{{ end }}'
     use: buildx
     goarch: arm64
     dockerfile: Dockerfile
@@ -98,10 +99,10 @@ dockers:
       - "--label=org.opencontainers.image.version={{.Version}}"
       - "--label=org.opencontainers.image.source={{.GitURL}}"
 docker_manifests:
-  - name_template: mesosphere/mindthegap:v{{trimprefix .Version "v"}}
+  - name_template: ghcr.io/mesosphere/mindthegap:v{{trimprefix .Version "v"}}
     image_templates:
-    - mesosphere/mindthegap:v{{trimprefix .Version "v"}}-amd64
-    - mesosphere/mindthegap:v{{trimprefix .Version "v"}}-arm64v8
+    - ghcr.io/mesosphere/mindthegap:v{{trimprefix .Version "v"}}-amd64
+    - ghcr.io/mesosphere/mindthegap:v{{trimprefix .Version "v"}}-arm64v8
 checksum:
   name_template: 'checksums.txt'
 snapshot: