diff --git a/.github-action-scripts/build-and-publish-artifacts.sh b/.github-action-scripts/build-and-publish-artifacts.sh
new file mode 100755
index 00000000..87a921f3
--- /dev/null
+++ b/.github-action-scripts/build-and-publish-artifacts.sh
@@ -0,0 +1,9 @@
+#!/bin//bash
+
+# cycle through all subbolders and run npm scripts
+cd ./packages
+
+# FIXME: 
+cd ./auth-provider
+npm i --prefix .
+npm run package
\ No newline at end of file
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
new file mode 100644
index 00000000..0a595db9
--- /dev/null
+++ b/.github/workflows/publish.yaml
@@ -0,0 +1,28 @@
+name: Publish
+on:
+  push:
+    branches:
+      - '**' # matches every branch
+      - '!main'
+  pull_request:
+
+# Needed for nx-set-shas when run on the main branch
+permissions:
+  actions: read
+  contents: read
+
+jobs:
+  artifacts:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 18
+      - uses: actions/setup-python@v4
+        with:
+          python-version: '3.x'
+          # architecture: 'x64'
+        # cache: 'pip'
+      - name: publish artifact
+        run: .github-action-scripts/build-and-publish-artifacts.sh
\ No newline at end of file