diff --git a/.gitea/workflows/appbuild.yml b/.gitea/workflows/appbuild.yml
index b0c8f6e6c..93cbbdaab 100644
--- a/.gitea/workflows/appbuild.yml
+++ b/.gitea/workflows/appbuild.yml
@@ -2,8 +2,11 @@ name: Package build
 
 on:
   push:
-    branches:
-      - draggable
+    tags:
+      - 'mod*'
+
+permissions:
+  contents: write
 
 jobs:
   build:
@@ -39,3 +42,12 @@ jobs:
       with:
         name: Deck app tarball
         path: build/artifacts/deck.tar.gz
+    - name: Attach tarball to release
+      uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 # v2
+      id: attach_to_release
+      with:
+        repo_token: ${{ secrets.GITHUB_TOKEN }}
+        file: build/artifacts/deck.tar.gz
+        asset_name: deck.tar.gz
+        tag: ${{ github.ref }}
+        overwrite: true