diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0e4913d..2d4ddcd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -32,3 +32,14 @@ jobs:
         if: ${{ matrix.os != 'windows-latest' }}
       - run: ./millw.bat -i -j 0 -k __.testCached
         if: ${{ matrix.os == 'windows-latest' }}
+
+      - name: Setup GPG secrets
+        if: ${{ matrix.os == env.PUBLISH_OS }}
+        run: |
+          gpg --version
+          cat <(echo "${{ secrets.GPG_SECRET_KEY }}") | base64 --decode | gpg --batch --import
+          gpg --list-secret-keys --keyid-format LONG
+
+      - name: Publish to Maven Central
+        if: ${{ matrix.os == env.PUBLISH_OS && matrix.java-version == env.PUBLISH_JAVA_VERSION && github.ref == env.PUBLISH_BRANCH && github.event_name == 'push' }}
+        run: ./millw -i mill.scalalib.PublishModule/publishAll --sonatypeCreds "${{ secrets.SONATYPE_CREDS }}" --gpgArgs "--passphrase=${{ secrets.GPG_SECRET_KEY_PASS}},--batch,--yes,-a,-b,--pinentry-mode,loopback" --publishArtifacts __.publishArtifacts --readTimeout 600000 --release true --signed true
diff --git a/README.adoc b/README.adoc
index 018d70f..8d0f1a8 100644
--- a/README.adoc
+++ b/README.adoc
@@ -3,3 +3,8 @@
 Mill plugin to derive a version from (last) git tag and edit state.
 It may support other VCS as well.
 
+== Releases / Changelog
+
+=== mill-vsc-version 0.0.1 - 2020-06-22
+
+* Initial Release, intended for internal/test usage
\ No newline at end of file
diff --git a/build.sc b/build.sc
index fc76b8f..5934417 100644
--- a/build.sc
+++ b/build.sc
@@ -42,7 +42,7 @@ trait BaseModule extends CrossScalaModule with PublishModule {
     Agg(ivy"${scalaOrganization()}:scala-library:${scalaVersion()}")
   }
 
-  def publishVersion = "0.0.0-SNAPSHOT"
+  def publishVersion = "0.0.1" // TODO: use git-based version, eat own dog food
 
   override def javacOptions = Seq("-source", "1.8", "-target", "1.8")
   override def scalacOptions = Seq("-target:jvm-1.8")