diff --git a/.github/workflows/master.yaml b/.github/workflows/master.yaml
index cd2ee75ab..478bd1e77 100644
--- a/.github/workflows/master.yaml
+++ b/.github/workflows/master.yaml
@@ -8,7 +8,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     permissions: # TODO remove when public
-      contents: read
+       packages: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -48,8 +48,14 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-buildx-
 
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Build and push
-        if: false # TODO fix for github images
         id: docker_build_and_push
         uses: docker/build-push-action@v5
         with:
@@ -71,7 +77,6 @@ jobs:
 #                               #
 #################################
       - name: update-master-deployment
-        if: false # TODO remove after infra fix
         run: |
           git clone https://infra-tech:${{ secrets.INFRA_USER_ACCESS_TOKEN }}@github.com/kafbat/ui-infra.git --branch main
           cd kafka-ui-infra/aws-infrastructure4eks/argocd/scripts
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 505d0e7e7..ca0e0ee18 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -7,7 +7,8 @@ jobs:
   release:
     runs-on: ubuntu-latest
     permissions: # TODO remove when public
-      contents: read
+       contents: write
+       packages: write
     outputs:
       version: ${{steps.build.outputs.version}}
     steps:
@@ -67,8 +68,13 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-buildx-
 
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: Build and push
-        if: false # TODO fix for github images
         id: docker_build_and_push
         uses: docker/build-push-action@v5
         with: