diff --git a/.gitignore b/.gitignore
index 0e25289..62356eb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 TODO.md
 bin/mcp-filepuff
 mcp-filepuff
+dist/
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 2c03516..e884007 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -109,6 +109,19 @@ release:
     ```
 
 
+dockers:
+  - image_templates:
+      - "ghcr.io/lukaszraczylo/filepuff-mcp:{{ .Tag }}"
+      - "ghcr.io/lukaszraczylo/filepuff-mcp:latest"
+    ids:
+      - mcp-filepuff-cgo
+    use: buildx
+    build_flag_templates:
+      - "--platform=linux/amd64"
+    goarch: amd64
+    goos: linux
+    dockerfile: Dockerfile
+
 signs:
   - cmd: cosign
     signature: "${artifact}.sigstore.json"
@@ -120,4 +133,13 @@ signs:
     artifacts: checksum
     output: true
 
+docker_signs:
+  - cmd: cosign
+    artifacts: manifests
+    output: true
+    args:
+      - "sign"
+      - "--yes"
+      - "${artifact}"
+
 
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..a02f88e
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,3 @@
+FROM gcr.io/distroless/base-debian12:nonroot
+COPY mcp-filepuff /usr/local/bin/mcp-filepuff
+ENTRYPOINT ["mcp-filepuff"]