diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 69d5541..e075712 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -131,6 +131,13 @@ jobs:
         run: |
           docker buildx imagetools inspect ${{ steps.tags.outputs.tags }}
 
+      - name: Ensure package is public
+        run: |
+          gh api -X PATCH /user/packages/container/winnow \
+            -f visibility=public || true
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
   build-cpu:
     name: Build CPU-only (amd64)
     runs-on: ubuntu-latest
@@ -185,3 +192,10 @@ jobs:
       - name: Inspect CPU image
         run: |
           docker buildx imagetools inspect ${{ steps.cpu-tag.outputs.tag }}
+
+      - name: Ensure package is public
+        run: |
+          gh api -X PATCH /user/packages/container/winnow \
+            -f visibility=public || true
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}