diff --git a/.github/workflows/release.yml b/.github/workflows/redisctl-release.yml
similarity index 99%
rename from .github/workflows/release.yml
rename to .github/workflows/redisctl-release.yml
index beed2083..e98c7b55 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/redisctl-release.yml
@@ -42,7 +42,7 @@ on:
   pull_request:
   push:
     tags:
-      - '**[0-9]+.[0-9]+.[0-9]+*'
+      - 'redisctl**[0-9]+.[0-9]+.[0-9]+*'
 
 jobs:
   # Run 'dist plan' (or host) to determine what tasks we need to do
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 64492dec..c3f0141f 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -33,6 +33,8 @@ jobs:
       
       - name: Install Rust
         uses: dtolnay/rust-toolchain@7b1c307e0dcbda6122208f10795a713336a9b35a  # stable
+        with:
+          toolchain: stable
       
       - name: Cache cargo registry
         uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab  # v2.7.5
@@ -89,7 +91,6 @@ print(json.dumps(sarif))
         with:
           command: check
           arguments: --all-features
-        continue-on-error: true  # Don't fail until deny.toml is configured
 
   dependency-review:
     name: Dependency Review
diff --git a/dist-workspace.toml b/dist-workspace.toml
index bbb0bbd1..7e4a4a42 100644
--- a/dist-workspace.toml
+++ b/dist-workspace.toml
@@ -7,6 +7,8 @@ members = ["cargo:."]
 cargo-dist-version = "0.29.0"
 # CI backends to support
 ci = "github"
+# Tag pattern for releases (supports prefixed tags from release-plz)
+tag-namespace = "redisctl"
 # The installers to generate for each app
 installers = ["shell", "powershell"]
 # Target platforms to build apps for (Rust target-triple syntax)
@@ -15,13 +17,9 @@ targets = ["aarch64-apple-darwin", "aarch64-unknown-linux-gnu", "x86_64-apple-da
 install-path = "CARGO_HOME"
 # Whether to install an updater program
 install-updater = false
-# Build only the main unified binary by default
-# Users who want cloud-only or enterprise-only can build from source
-
-# Create checksums for artifacts
+# Checksums to generate for each App
 checksum = "sha256"
-
-# Include these files in archives  
+# Extra static files to include in each App (path relative to this Cargo.toml's dir)
 include = ["LICENSE-MIT", "LICENSE-APACHE", "README.md"]
 
 # Publish to Homebrew tap (can be configured later)