diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index df5058f..9abad87 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -2,7 +2,13 @@
 name: binaries
 
 "on":
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - master
   push:
+    branches:
+      - master
     tags:
       - v*
 
@@ -31,6 +37,7 @@ jobs:
 
       - name: Sign release
         id: gpgsign
+        if: startsWith(github.ref, 'refs/tags/')
         uses: actionhippie/gpgsign@v1
         with:
           private_key: ${{ secrets.GNUPG_KEY }}
diff --git a/.github/workflows/changes.yml b/.github/workflows/changes.yml
index cb5f8f5..76edf2b 100644
--- a/.github/workflows/changes.yml
+++ b/.github/workflows/changes.yml
@@ -2,6 +2,10 @@
 name: changes
 
 "on":
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - master
   push:
     branches:
       - master
@@ -29,6 +33,7 @@ jobs:
 
       - name: Commit changes
         id: commit
+        if: github.event_name != 'pull_request'
         uses: EndBug/add-and-commit@v9
         with:
           author_name: GitHub Actions
@@ -60,6 +65,7 @@ jobs:
 
       - name: Commit changes
         id: commit
+        if: github.event_name != 'pull_request'
         uses: EndBug/add-and-commit@v9
         with:
           author_name: GitHub Actions
@@ -91,6 +97,7 @@ jobs:
 
       - name: Commit changes
         id: commit
+        if: github.event_name != 'pull_request'
         uses: EndBug/add-and-commit@v9
         with:
           author_name: GitHub Actions
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index f6885ce..37c3737 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -2,6 +2,10 @@
 name: docker
 
 "on":
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - master
   push:
     branches:
       - master
@@ -18,16 +22,20 @@ jobs:
           - platform: linux/386
             goos: linux
             goarch: 386
+            tags: netgo
           - platform: linux/amd64
             goos: linux
             goarch: amd64
-          - platform: linux/arm64
-            goos: linux
-            goarch: arm64
+            tags: netgo
           - platform: linux/arm/6
             goos: linux
             goarch: arm
             goarm: 6
+            tags: netgo
+          - platform: linux/arm64
+            goos: linux
+            goarch: arm64
+            tags: netgo
 
     steps:
       - name: Checkout source
@@ -46,6 +54,7 @@ jobs:
           GOOS: ${{ matrix.goos }}
           GOARCH: ${{ matrix.goarch }}
           GOARM: ${{ matrix.goarm }}
+          TAGS: ${{ matrix.tags }}
         run: make generate
 
       - name: Run build
@@ -54,6 +63,7 @@ jobs:
           GOOS: ${{ matrix.goos }}
           GOARCH: ${{ matrix.goarch }}
           GOARM: ${{ matrix.goarm }}
+          TAGS: ${{ matrix.tags }}
         run: make build
 
       - name: Docker meta
@@ -128,6 +138,7 @@ jobs:
   manifest:
     runs-on: ubuntu-latest
     needs: docker
+    if: github.event_name != 'pull_request'
 
     steps:
       - name: Checkout source
@@ -171,6 +182,7 @@ jobs:
 
       - name: Quay manifest
         id: quay
+        if: github.event_name != 'pull_request'
         uses: actionhippie/manifest@v1
         with:
           username: ${{ secrets.QUAY_USERNAME }}
@@ -182,6 +194,7 @@ jobs:
 
       - name: Ghcr tags
         id: ghcrTags
+        if: github.event_name != 'pull_request'
         uses: docker/metadata-action@v5
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -194,6 +207,7 @@ jobs:
 
       - name: Ghcr manifest
         id: ghcr
+        if: github.event_name != 'pull_request'
         uses: actionhippie/manifest@v1
         with:
           username: ${{ github.actor }}
@@ -206,6 +220,7 @@ jobs:
   readme:
     runs-on: ubuntu-latest
     needs: docker
+    if: github.event_name != 'pull_request'
 
     steps:
       - name: Checkout source
@@ -214,6 +229,7 @@ jobs:
 
       - name: Hub readme
         id: hub
+        if: github.event_name != 'pull_request'
         uses: actionhippie/pushrm@v1
         with:
           provider: dockerhub
@@ -225,6 +241,7 @@ jobs:
 
       - name: Quay readme
         id: quay
+        if: github.event_name != 'pull_request'
         uses: actionhippie/pushrm@v1
         with:
           provider: quay
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 8badfe3..ce9526a 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -2,6 +2,10 @@
 name: docs
 
 "on":
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - master
   push:
     branches:
       - master
@@ -28,6 +32,7 @@ jobs:
 
       - name: Deploy pages
         id: deploy
+        if: github.event_name != 'pull_request'
         uses: peaceiris/actions-gh-pages@v3
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/general.yml b/.github/workflows/general.yml
index a790052..b850470 100644
--- a/.github/workflows/general.yml
+++ b/.github/workflows/general.yml
@@ -2,10 +2,11 @@
 name: general
 
 "on":
-  push:
+  workflow_dispatch:
+  pull_request:
     branches:
       - master
-  pull_request:
+  push:
     branches:
       - master
 
@@ -50,7 +51,7 @@ jobs:
 
       - name: Coverage report
         id: codacy
-        if: github.ref == 'refs/heads/master'
+        if: github.event_name != 'pull_request'
         uses: codacy/codacy-coverage-reporter-action@v1
         with:
           project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
diff --git a/.github/workflows/kustomize.yml b/.github/workflows/kustomize.yml
index 5e6ea92..4fdec9c 100644
--- a/.github/workflows/kustomize.yml
+++ b/.github/workflows/kustomize.yml
@@ -2,10 +2,11 @@
 name: kustomize
 
 "on":
-  push:
+  workflow_dispatch:
+  pull_request:
     branches:
       - master
-  pull_request:
+  push:
     branches:
       - master
 
@@ -17,8 +18,6 @@ jobs:
       - name: Checkout source
         id: source
         uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.BOT_ACCESS_TOKEN }}
 
       - name: Generate manifest
         id: kustomize