diff --git a/.forgejo/workflows/publish.yml b/.forgejo/workflows/publish.yml
new file mode 100644
index 0000000..7c067ca
--- /dev/null
+++ b/.forgejo/workflows/publish.yml
@@ -0,0 +1,22 @@
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  image:
+    name: Publish Maven packages
+    runs-on: docker
+    container: git.frostfs.info/truecloudlab/env:openjdk-11-maven-3.8.6
+    steps:
+      - name: Clone git repo
+        uses: actions/checkout@v3
+
+      - name: Publish release packages
+        run: mvn clean --batch-mode --update-snapshots deploy
+        if: >-
+          startsWith(github.ref, 'refs/tags/v') &&
+          (github.event_name == 'workflow_dispatch' || github.event_name == 'push')
+        env:
+          MAVEN_REGISTRY: TrueCloudLab
+          MAVEN_REGISTRY_USER: ${{secrets.MAVEN_REGISTRY_USER}}
+          MAVEN_REGISTRY_PASSWORD: ${{secrets.MAVEN_REGISTRY_PASSWORD}}