diff --git a/.github/workflows/build-rootless-deb.yml b/.github/workflows/build-rootless-deb.yml
index 099b8d1..85422ed 100644
--- a/.github/workflows/build-rootless-deb.yml
+++ b/.github/workflows/build-rootless-deb.yml
@@ -4,6 +4,9 @@ on:
   push:
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   build:
     runs-on: macos-latest
@@ -37,3 +40,12 @@ jobs:
           path: |
             packages/*.deb
           if-no-files-found: error
+
+      - name: Publish release
+        if: github.event_name == 'workflow_dispatch'
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: rootless-${{ github.run_number }}
+          name: Rootless build #${{ github.run_number }}
+          generate_release_notes: true
+          files: packages/*.deb