diff --git a/.github/workflows/build-deliver.yaml b/.github/workflows/build-deliver.yaml
new file mode 100644
index 0000000..7253435
--- /dev/null
+++ b/.github/workflows/build-deliver.yaml
@@ -0,0 +1,27 @@
+# docker continuous delivery
+# build docker images and push to configured repo, with tags to match branches and git tags
+---
+name: Build & Deliver
+on: [push]
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout git commit
+        uses: actions/checkout@main
+
+      - name: Publish to GitHub Container Registry
+        # TODO: pin to hash
+        uses: elgohr/Publish-Docker-Github-Action@main
+        with:
+          name: ${{ github.repository }}
+          registry: ghcr.io
+
+          # GitHub actor
+          username: ${{ github.actor }}
+
+          # GitHub access token
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+          # create docker image tags to match git tags
+          tag_names: true