diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
new file mode 100644
index 0000000..283a2d7
--- /dev/null
+++ b/.github/workflows/docker-image.yml
@@ -0,0 +1,24 @@
+name: build & publish Docker image
+on:
+  push:
+    branches:
+      - 5
+jobs:
+  build-and-publish:
+    name: build & publish Docker image
+    runs-on: ubuntu-latest
+    steps:
+      - name: check out the repo
+        uses: actions/checkout@v2
+      - name: log in to Docker Hub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+      - name: build Docker image & push to Docker Hub
+        uses: docker/build-push-action@v2
+        with:
+          push: true
+          tags: |
+            derhuerst/db-rest:5
+            derhuerst/db-rest:latest
diff --git a/readme.md b/readme.md
index 2c7037d..bc13998 100644
--- a/readme.md
+++ b/readme.md
@@ -7,7 +7,6 @@
 ![db-rest architecture diagram](architecture.svg)
 
 [![API status](https://badgen.net/uptime-robot/status/m784879516-8a977fa91b975fc3884a9857)](https://stats.uptimerobot.com/57wNLs39M/784879516)
-[![Docker build status](https://img.shields.io/docker/build/derhuerst/db-rest.svg)](https://hub.docker.com/r/derhuerst/db-rest/)
 [![dependency status](https://img.shields.io/david/derhuerst/db-rest.svg)](https://david-dm.org/derhuerst/db-rest)
 ![ISC-licensed](https://img.shields.io/github/license/derhuerst/db-rest.svg)
 [![support me via GitHub Sponsors](https://img.shields.io/badge/support%20me-donate-fa7664.svg)](https://github.com/sponsors/derhuerst)