diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 68673863a89..7c43b07e8aa 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -14,6 +14,8 @@ on:
     branches:
       - develop
       - release
+    tags:
+      - finagle-*
   pull_request:
 
 jobs:
@@ -112,3 +114,42 @@ jobs:
         run: source ./netty-snapshot-env.sh
       - name: test
         run: ${{ format('./sbt ++{0} clean "{1}/test"', matrix.scala, matrix.project) }}
+  release:
+    runs-on: ubuntu-latest
+    permissions: write-all
+    if: startsWith(github.ref, 'refs/tags/')
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2.3.4
+      - name: Setup Java
+        uses: actions/setup-java@v1
+        with:
+          java-version: '1.8'
+      - name: build dependencies
+        uses: twitter/dodo-build@v3
+        with:
+          branch: develop
+          project: finagle
+          no-test: true
+          publish-m2: true
+          verbose: true
+      - name: Create finagle-http package
+        run: ./sbt ++2.12.12 clean "finagle-http/package"
+      - name: Create release on GitHub
+        uses: softprops/action-gh-release@v1
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: ${{ secrets.OIDC_ROLE }}
+          role-duration-seconds: 900
+          aws-region: us-east-1
+      - name: Upload to S3
+        run: |
+          FILE=$(find finagle-http/target/scala-2.12 -name 'finagle-http_2.12-*.jar')
+          NAME=$(echo "$FILE" | rev | cut -d/ -f1 | rev)
+
+          aws s3 cp "${FILE}" "s3://${{ secrets.S3_BUCKET }}/github/finagle/${NAME}" > /dev/null
+          aws s3api put-object-acl --bucket ${{ secrets.S3_BUCKET }} --acl public-read --key "github/finagle/${NAME}" > /dev/null
+
+          CHECKSUM=$(sha256sum "${FILE}" | awk '{print $1}')
+          echo "${NAME}: https://{{ secrets.CDN_HOSTNAME }}/github/finagle/${NAME} ${CHECKSUM}"