diff --git a/codemagic.yaml b/codemagic.yaml
index fd62283713f..1c519ef1a7b 100644
--- a/codemagic.yaml
+++ b/codemagic.yaml
@@ -1,6 +1,17 @@
+environment:
+    vars:
+      GH_TOKEN
+
 workflows:
   build:
     name: Build workflow
+    triggering:
+      events:
+        - tag
+      branch_patterns:
+        - pattern: '*'
+          include: true
+          source: true
     scripts:
       - name: install dependencies
         script: HOMEBREW_NO_AUTO_UPDATE=1 brew install boost openssl zmq libpgm miniupnpc ldns expat libunwind-headers protobuf
@@ -24,3 +35,13 @@ workflows:
         script: |
           export ARTIFACT_NAME="aeon-mac-armv8-$(git describe --tags)"
           curl --upload-file build/release/$ARTIFACT_NAME.tar.bz2 https://transfer.sh/$ARTIFACT_NAME.tar.bz2
+      - name: Publish to GitHub
+        script: |
+          #!/usr/bin/env zsh
+          # Publish only for tag builds
+          if [ -z ${CM_TAG} ]; then
+            echo "Not a tag build, will not publish GitHub release"
+            exit 0
+          fi
+          export ARTIFACT_NAME="aeon-mac-armv8-$(git describe --tags)"
+          gh release create "${CM_TAG}" build/release/$ARTIFACT_NAME.tar.bz2