diff --git a/.github/workflows/npm.yml b/.github/workflows/npm.yml
index 44a3c4a7f..3701af4e1 100644
--- a/.github/workflows/npm.yml
+++ b/.github/workflows/npm.yml
@@ -6,7 +6,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       # Setup .npmrc file to publish to npm
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/sample-publish.yml b/.github/workflows/sample-publish.yml
new file mode 100644
index 000000000..459564a70
--- /dev/null
+++ b/.github/workflows/sample-publish.yml
@@ -0,0 +1,22 @@
+name: Publish samples to NPM
+
+on:
+  push:
+    tags:
+      - 'sample-*'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      # Setup .npmrc file to publish to npm
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '18.x'
+          registry-url: 'https://registry.npmjs.org'
+      - name: publish sample package
+        run: npm install --include peer && npm publish --access=public
+        working-directory: plugins/git-proxy-plugin-samples
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/plugins/git-proxy-plugin-samples/package.json b/plugins/git-proxy-plugin-samples/package.json
index 923a0dba2..a3c11caa1 100644
--- a/plugins/git-proxy-plugin-samples/package.json
+++ b/plugins/git-proxy-plugin-samples/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@finos/git-proxy-plugin-samples",
-  "version": "0.1.0-alpha.0",
+  "version": "0.1.0",
   "description": "A set of sample (dummy) plugins for GitProxy to demonstrate how plugins are authored.",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"
@@ -16,6 +16,6 @@
     "express": "^4.18.2"
   },
   "peerDependencies": {
-    "@finos/git-proxy": "1.3.5-alpha.5"
+    "@finos/git-proxy": "^1.4.0"
   }
 }