diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2e47612..bebac5b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,22 @@ jobs:
           secret/data/github/repo/${{ github.repository }}/dockerhub/${{ github.repository_owner }}/credentials password | DOCKER_PASSWORD ;
           secret/data/github/repo/${{ github.repository }}/rancher-prime-registry/credentials registry | PRIME_REGISTRY ;
           secret/data/github/repo/${{ github.repository }}/rancher-prime-registry/credentials username | PRIME_REGISTRY_USERNAME ;
-          secret/data/github/repo/${{ github.repository }}/rancher-prime-registry/credentials password | PRIME_REGISTRY_PASSWORD
+          secret/data/github/repo/${{ github.repository }}/rancher-prime-registry/credentials password | PRIME_REGISTRY_PASSWORD ;
+          secret/data/github/repo/${{ github.repository }}/rancher-prime-stg-registry/credentials registry | STAGING_REGISTRY ;
+          secret/data/github/repo/${{ github.repository }}/rancher-prime-stg-registry/credentials username | STAGING_REGISTRY_USERNAME ;
+          secret/data/github/repo/${{ github.repository }}/rancher-prime-stg-registry/credentials password | STAGING_REGISTRY_PASSWORD ;
+
+    - name: Build and push image - Staging
+      uses: rancher/ecm-distro-tools/actions/publish-image@master
+      with:
+        image: "hardened-cni-plugins"
+        tag: ${{ github.event.release.tag_name }}
+        push-to-public: false
+
+        prime-repo: rancher
+        prime-registry: ${{ env.STAGING_REGISTRY }}
+        prime-username: ${{ env.STAGING_REGISTRY_USERNAME }}
+        prime-password: ${{ env.STAGING_REGISTRY_PASSWORD }}
 
     - name: Build and push image
       uses: rancher/ecm-distro-tools/actions/publish-image@master