diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml
index 05a456ff5..450b48cdd 100644
--- a/.github/workflows/publish-images.yml
+++ b/.github/workflows/publish-images.yml
@@ -80,6 +80,16 @@ jobs:
           cache-from: type=gha,scope=${{ matrix.image }}
           cache-to: type=gha,mode=max,scope=${{ matrix.image }}
 
+      - name: Keep deployment image public
+        env:
+          GH_TOKEN: ${{ github.token }}
+        shell: bash
+        run: |
+          gh api \
+            --method PATCH \
+            "/orgs/${{ github.repository_owner }}/packages/container/${{ matrix.image }}" \
+            -f visibility=public
+
   release:
     name: Publish release assets
     if: startsWith(github.ref, 'refs/tags/v')