diff --git a/.github/workflows/build-macos.yml b/.github/workflows/build-macos.yml
index a846861..eeea318 100644
--- a/.github/workflows/build-macos.yml
+++ b/.github/workflows/build-macos.yml
@@ -1,15 +1,12 @@
 name: build-macos
 
+permissions:
+  contents: write
+
 on:
-  push:
-    paths:
-      - "src/*.go"
-      - "src/go.mod"
-      - "src/go.sum"
-    branches:
-      - main
   schedule:
     - cron: "0 0 * * *"
+  workflow_dispatch:
 
 jobs:
   build:
@@ -47,6 +44,8 @@ jobs:
         rm Picocrypt.app.zip
         mv src/Picocrypt Picocrypt.app/Contents/MacOS/Picocrypt
         zip -r Picocrypt.zip Picocrypt.app
+        cd Picocrypt.app
+        zip -rX ../Picocrypt.app.zip *
 
     - name: Upload artifacts
       uses: actions/upload-artifact@v4
@@ -56,3 +55,11 @@ jobs:
           Picocrypt.zip
         if-no-files-found: error
         compression-level: 9
+
+    - name: Release
+      uses: softprops/action-gh-release@v2
+      with:
+        files: |
+          Picocrypt.app.zip
+        tag_name: nightly
+        make_latest: true