diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a0cc4c6da..fb2bf1eae 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -126,6 +126,12 @@ jobs:
   release:
     name: Create draft release
     runs-on: ubuntu-latest
+    permissions:
+      packages: read
+      contents: write
+    defaults:
+      run:
+        shell: bash
     needs:
       - manager-image
     steps:
diff --git a/Makefile b/Makefile
index 6ad83aecf..9f405fcd8 100644
--- a/Makefile
+++ b/Makefile
@@ -88,10 +88,16 @@ CTLPTL_VERSION := 0.8.25
 ############
 # Binaries #
 ############
+# need in CI for releasing
 CONTROLLER_GEN := $(abspath $(TOOLS_BIN_DIR)/controller-gen)
+$(CONTROLLER_GEN): # Build controller-gen from tools folder.
+	go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.12.0
 
+# need this in CI for releasing
 KUSTOMIZE := $(abspath $(TOOLS_BIN_DIR)/kustomize)
-kustomize: get-dependencies
+kustomize: $(KUSTOMIZE) ## Build a local copy of kustomize
+$(KUSTOMIZE): # Build kustomize from tools folder.
+	go install sigs.k8s.io/kustomize/kustomize/v4@v4.5.7
 
 TILT := $(abspath $(TOOLS_BIN_DIR)/tilt)
 tilt: $(TILT) ## Build a local copy of tilt
@@ -226,7 +232,7 @@ test-release:
 	$(MAKE) release-manifests
 
 .PHONY: release-manifests
-release-manifests: get-dependencies generate-manifests generate-go-deepcopy $(KUSTOMIZE) $(RELEASE_DIR) ## Builds the manifests to publish with a release
+release-manifests: generate-manifests generate-go-deepcopy $(KUSTOMIZE) $(RELEASE_DIR) ## Builds the manifests to publish with a release
 	$(KUSTOMIZE) build config/default > $(RELEASE_DIR)/cso-infrastructure-components.yaml
 	## Build cso-components (aggregate of all of the above).
 	cp metadata.yaml $(RELEASE_DIR)/metadata.yaml