diff --git a/.github/workflows/nuke-ci.yaml b/.github/workflows/nuke-ci.yaml
index e46ae0f8c..55931286f 100644
--- a/.github/workflows/nuke-ci.yaml
+++ b/.github/workflows/nuke-ci.yaml
@@ -1,8 +1,7 @@
 name: nuke the CI
 on:
-  push:
-    tags:
-      - "nuke-ci*"
+  workflow_dispatch:
+
 jobs:
   delete_all_runs:
     name: delete all workflow runs
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 198fd1ece..3d4f4a6f7 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -6,8 +6,7 @@ on:
       - "ci-bins*"
     tags: # run this also on release candidates
       - "[0-9]+.[0-9]+.[0-9]*"
-      # make binaries which may be ahead of releases to use in CI jobs
-      - "ci-bins"
+
 jobs:
   publish:
     permissions:
@@ -32,7 +31,9 @@ jobs:
         # size and performance optimized binary with profile.cli
         run: cargo b --release -p libra
 
+      # release bin
       - name: libra publish
+        if: ${{ !contains(github.ref, 'ci-bins') }}
         uses: svenstaro/upload-release-action@v2
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
@@ -40,3 +41,14 @@ jobs:
           tag: ${{ github.ref }}
           overwrite: true
           file_glob: true
+
+      # CI bin
+      - name: libra publish
+        if: ${{ contains(github.ref, 'ci-bins') }}
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: target/release/libra
+          tag: ci-bins
+          overwrite: true
+          file_glob: true