diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6b74025..011e08c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,6 +28,7 @@ name: CI
 on:
   push:
     branches: [master]
+    tags: ['v*']
   pull_request:
   schedule:
     # Weekly probe of the live endpoints, so external API changes surface.
diff --git a/docker-compose.yml b/docker-compose.yml
index 6f41f7f..84683dd 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -93,7 +93,7 @@ services:
     # reported unhealthy. nginx-proxy shows 502s while webhook mode is down,
     # so surface that to the orchestrator.
     healthcheck:
-      test: ["CMD-SHELL", "test '${WEBHOOK:-true}' != true || exec 3<>/dev/tcp/127.0.0.1/${WEBHOOK_PORT:-8443}"]
+      test: ["CMD-SHELL", "test '${WEBHOOK:-true}' != true || bash -c 'exec 3<>/dev/tcp/127.0.0.1/${WEBHOOK_PORT:-8443}'"]
       interval: 30s
       timeout: 5s
       retries: 3