diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index f468a5a..b8ac5f7 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -2,6 +2,11 @@ name: ci
 
 on:
   push:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to deploy'
+        required: false
 
 jobs:
   build:
@@ -122,7 +127,7 @@ jobs:
           SHORT_SHA=$(echo "${GITHUB_SHA}" | cut -c1-7)
           
           IMAGE_BASE="ghcr.io/${OWNER}/${REPO}"
-          IMAGE_TAG="sha-${SHORT_SHA}"
+          IMAGE_TAG=${{ github.event.inputs.tag || format('sha-{0}', github.sha) }}
           
           echo "IMAGE_BASE=${IMAGE_BASE}" >> $GITHUB_ENV
           echo "IMAGE_TAG=${IMAGE_TAG}" >> $GITHUB_ENV
@@ -139,7 +144,7 @@ jobs:
       - name: Decrypt SOPS Secrets Test
         run: |
           cd .k8s
-          sops -d secrets.enc.yml secrets.yml
+          sops -d secrets.enc.yml > secrets.yml
 
       - name: Apply Kubernetes Manifests - Configuration
         run: cat .k8s/config.template.yml | envsubst | kubectl apply -f -