diff --git a/.gitea/workflows/image-deploy.yaml b/.gitea/workflows/image-deploy.yaml
index c5ac91c..3fe4ef9 100644
--- a/.gitea/workflows/image-deploy.yaml
+++ b/.gitea/workflows/image-deploy.yaml
@@ -1,7 +1,7 @@
 on: 
   push:
     branches:
-      - main
+      - feature/oci-cd
   schedule:
     - cron: '@weekly'     # once per week
     
@@ -22,6 +22,30 @@ jobs:
         run: |
           curl -fsSL https://git.limbosolutions.com/kb/gitea/raw/branch/main/cloud-scripts/setup-limbo-actions.sh | bash 2>&1
   
+
+      - name: run buildctl build and push
+        shell: bash
+        run: |
+          set -euo pipefail
+          DOCKER_CONFIG="${RUNNER_TEMP}/.buildctl_docker"
+          mkdir -p "$DOCKER_CONFIG"
+          
+          # clean up
+          trap 'rm -rf "$DOCKER_CONFIG"' EXIT
+          
+
+          USER='${{ secrets.OCI_LIMBO_REGISTRY_DEVCONTAINERS_USERNAME }}'
+          PASS='${{ secrets.OCI_LIMBO_REGISTRY_DEVCONTAINERS_PASSWORD }}'
+          AUTH=$(printf '%s:%s' "$USER" "$PASS" | base64 -w0)
+          cat > "/root/tmp_config.json" <<EOF
+          {
+            "auths": {
+              "${{ inputs.registry_addr }}": {
+                "auth": "$AUTH"
+              }
+            }
+          }
+          EOF
    
       - name: Build and push Image
         uses: ./.gitea/limbo_actions/buildkit-build-push