diff --git a/.github/workflows/promote-release.yml b/.github/workflows/promote-release.yml
new file mode 100644
index 0000000000..0cdd646cae
--- /dev/null
+++ b/.github/workflows/promote-release.yml
@@ -0,0 +1,28 @@
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: version to promote to latest
+        type: string
+        required: true
+
+jobs:
+  promote:
+    runs-on: ubuntu-latest
+    environment: CLIS3BucketAndCloudfront
+    env:
+      CLOUDFRONT_DISTRIBUTION: ${{ secrets.CLOUDFRONT_DISTRIBUTION }}
+      HEROKU_S3_BUCKET: ${{ secrets.HEROKU_S3_BUCKET }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      AWS_EC2_METADATA_DISABLED: true
+    steps:
+      - uses: actions/checkout@v3
+      - name: Use Node.js 16.x
+        uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+          cache: yarn
+      - run: yarn --frozen-lockfile --network-timeout 1000000
+      - run: cd packages/cli
+      - run: oclif promote --deb --version=${{ inputs.version }}