diff --git a/.devcontainer/BUILD.bazel b/.devcontainer/BUILD.bazel
index d03eb37..af531e0 100644
--- a/.devcontainer/BUILD.bazel
+++ b/.devcontainer/BUILD.bazel
@@ -6,5 +6,5 @@ container_push(
     image = "@dev-container//image:dockerfile_image.tar",
     registry = "docker.pkg.github.com",
     repository = "roleypoly/roleypoly/dev-container",
-    tag = "{STABLE_GIT_BRANCH}",
+    tag = "{STABLE_GIT_BRANCH}" if "{STABLE_GIT_BRANCH}" != "main" else "latest",
 )
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 967ba28..edef6c3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -42,7 +42,7 @@ jobs:
             --workspace_status_command hack/workspace_status.sh
 
       - name: Publish Dev Container Image
-        if: github.ref == refs/heads/main
+        if: github.ref == "refs/heads/main"
         run: |
           "${GITHUB_WORKSPACE}/bin/bazel" run \
             --stamp \