diff --git a/.github/workflows/hackage.yml b/.github/workflows/hackage.yml
new file mode 100644
index 0000000..d04e036
--- /dev/null
+++ b/.github/workflows/hackage.yml
@@ -0,0 +1,33 @@
+name: hackage
+
+on:
+  push:
+    tags:
+      - 'c14n-*'
+
+jobs:
+  publish-to-hackage:
+    name: 'Publish to Hackage'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: haskell/actions/setup@v1
+        id: install-haskell
+        with:
+          stack-no-global: true
+          enable-stack: true
+          stack-version: 'latest'
+
+      - name: Configure stack
+        run: |
+          mkdir -p ${{ steps.install-haskell.outputs.stack-root }}
+          echo "save-hackage-creds: false" >> ${{ steps.install-haskell.outputs.stack-root }}/config.yaml
+
+      - name: Publish `c14n`
+        if: startsWith(github.ref, 'refs/tags/c14n-')
+        run: stack upload .
+        env:
+          HACKAGE_USERNAME: ${{ secrets.HACKAGE_USER }}
+          HACKAGE_PASSWORD: ${{ secrets.HACKAGE_PASSWORD }}