diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 00000000..8be658b7
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,25 @@
+name: release
+
+on:
+  workflow_dispatch:
+    inputs:
+      semver:
+        description: 'Release bump type'
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+
+permissions: {}
+
+jobs:
+  release:
+    permissions:
+      id-token: write # required for npm provenance via OIDC
+      contents: write # required to push the release commit and the tag
+    # TODO: repin to the fastify/workflows release tag once https://github.com/fastify/workflows/pull/237 is released
+    uses: fastify/workflows/.github/workflows/release.yml@2ce820549a7b93a001364454f1ccf368e017a4ff
+    with:
+      semver: ${{ inputs.semver }}