diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 3a0720e..3cabfb8 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -10,6 +10,8 @@ name: Scan published image
 # workflow proposes.
 
 on:
+  push: # TEMPORARY: test trigger, removed before review
+    branches: [feat/automated-updates]
   schedule:
     - cron: "0 6 * * 2" # Tuesdays 06:00 UTC
   workflow_dispatch:
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index e5447d7..7ab1e97 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -14,6 +14,8 @@ name: Check for updates
 # requests write access to this repository) is set, it is used instead and the normal PR checks run too.
 
 on:
+  push: # TEMPORARY: test trigger, removed before review
+    branches: [feat/automated-updates]
   schedule:
     - cron: "0 6 * * 1" # Mondays 06:00 UTC
   workflow_dispatch:
@@ -47,7 +49,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # Scheduled runs have no inputs; fall back to the defaults above.
           OLDER_THAN: ${{ inputs.rebuild_if_older_than_days || 30 }}
-          FORCE: ${{ inputs.force_rebuild && 'true' || 'false' }}
+          FORCE: ${{ (inputs.force_rebuild || github.event_name == 'push') && 'true' || 'false' }}
         run: |
           args=(--write --rebuild-if-older-than "$OLDER_THAN" --github-output "$GITHUB_OUTPUT")
           if [ "$FORCE" = "true" ]; then args+=(--force-rebuild); fi
diff --git a/versions.env b/versions.env
index 8eb4a21..9d7767a 100644
--- a/versions.env
+++ b/versions.env
@@ -14,4 +14,4 @@ RUNTIME_IMAGE=alpine:3.24.2
 # Build number of this image for the pinned MINIO_TAG. Published as insectai/minio:<MINIO_TAG>-r<IMAGE_REVISION>,
 # a tag that is never overwritten. Raise it by one to republish the same release (for example with newer
 # base images); reset it to 1 when MINIO_TAG changes.
-IMAGE_REVISION=1
+IMAGE_REVISION=2