diff --git a/.github/workflows/go-release-cgo.yaml b/.github/workflows/go-release-cgo.yaml
index 6c52e03..6b295b4 100644
--- a/.github/workflows/go-release-cgo.yaml
+++ b/.github/workflows/go-release-cgo.yaml
@@ -201,6 +201,24 @@ jobs:
                   name: frontend-dist
                   path: ${{ inputs.node-embed-path }}
 
+            # goreleaser Pro --split pushes Docker images during the
+            # per-target build job (not just the merge job), so we need
+            # ghcr auth here too. Only on Linux runners — Docker builds
+            # are Linux-only in the projects that consume this workflow.
+            - name: Login to GitHub Container Registry
+              if: matrix.goos == 'linux'
+              uses: docker/login-action@v3
+              with:
+                  registry: ghcr.io
+                  username: ${{ github.actor }}
+                  password: ${{ secrets.GITHUB_TOKEN }}
+
+            - name: Set up Docker Buildx
+              if: matrix.goos == 'linux'
+              uses: docker/setup-buildx-action@v3
+              with:
+                  driver-opts: image=moby/buildkit:latest
+
             - name: Run GoReleaser (split)
               uses: lukaszraczylo/shared-actions/.github/actions/goreleaser@main
               with: