diff --git a/.github/workflows/automation-autorelease.yml b/.github/workflows/automation-autorelease.yml
new file mode 100644
index 0000000..f255e7c
--- /dev/null
+++ b/.github/workflows/automation-autorelease.yml
@@ -0,0 +1,24 @@
+name: autorelease
+on:
+  workflow_dispatch: {}
+  schedule:
+    # check at 11am every day
+    - cron: "0 11 * * *"
+jobs:
+  autorelease:
+    name: autorelease
+    runs-on: ubuntu-latest
+    if: ${{ github.ref == 'refs/heads/main' }}
+    steps:
+      - name: Get Token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.THM_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.THM_AUTOMATION_PRIVATE_KEY }}
+      - name: autorelease
+        uses: markelliot/autorelease@v2
+        with:
+          github-token: ${{ steps.app-token.outputs.token }}
+          max-days: 7
+          tag-only: true
diff --git a/.github/workflows/periodic-renovate.yml b/.github/workflows/periodic-renovate.yml
index f6de065..949feb6 100644
--- a/.github/workflows/periodic-renovate.yml
+++ b/.github/workflows/periodic-renovate.yml
@@ -7,6 +7,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
+    if: ${{ github.ref == 'refs/heads/main' }}
     steps:
       - name: Get Renovate GitHub App Token
         id: app-token