diff --git a/.github/workflows/build-static-binary.yaml b/.github/workflows/build-static-binary.yaml
new file mode 100644
index 0000000000..478e18454e
--- /dev/null
+++ b/.github/workflows/build-static-binary.yaml
@@ -0,0 +1,43 @@
+---
+name: Build static binary
+on:
+  push:
+    tags:
+      - 'v*'
+env:
+  BUILDER_IMAGE: ghcr.io/icodex/nixos-nix:v2.3.15
+
+jobs:
+  build:
+    runs-on: ubuntu-20.04
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: amd64
+          - arch: arm64
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Build skopeo binary file
+        run: |
+          DIGEST=$(skopeo --insecure-policy --override-arch ${{ matrix.arch }} inspect docker://${BUILDER_IMAGE} | jq -r '.Digest')
+          docker run --rm -t -v $PWD:/build ${BUILDER_IMAGE}@${DIGEST} \
+          sh -c "cd /build && nix build -f nix && cp ./result/bin/skopeo skopeo-linux-${{ matrix.arch }}"
+          sha256sum skopeo-linux-${{ matrix.arch }} > skopeo-linux-${{ matrix.arch }}.sha256sum.txt
+
+      - name: Release and upload binary file
+        uses: softprops/action-gh-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          files: |
+            skopeo-linux-${{ matrix.arch }}
+            skopeo-linux-${{ matrix.arch }}.sha256sum.txt