diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e162a66..b174c91 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,7 +7,5 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2
-    - uses: cachix/install-nix-action@v12
-      with: 
-        skip_adding_nixpkgs_channel: true
+    - uses: cachix/install-nix-action@v13
     - run: nix-build -A hydraJobs.release
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..75e039d
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,27 @@
+name: Publish
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  build:
+    name: Publish tarballs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - uses: cachix/install-nix-action@v13
+      - name: Build tarballs
+        run: |
+          nix-build -A hydraJobs.tarball
+          install -D ./result/tarballs/*.tar.bz2 ./dist/patchelf-$(cat version).tar.bz
+          install -D ./result/tarballs/*.tar.gz ./dist/patchelf-$(cat version).tar.gz
+      - name: Upload binaries to release
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: dist/*
+          tag: ${{ github.ref }}
+          overwrite: true
+          file_glob: true