diff --git a/docker-credential-gcr.yaml b/docker-credential-gcr.yaml
new file mode 100644
index 00000000000..cb14b575277
--- /dev/null
+++ b/docker-credential-gcr.yaml
@@ -0,0 +1,49 @@
+package:
+  name: docker-credential-gcr
+  version: 2.1.8
+  epoch: 0
+  description: A Docker credential helper for GCR users
+  copyright:
+    - license: Apache-2.0
+
+environment:
+  contents:
+    packages:
+      - ca-certificates-bundle
+      - busybox
+      - go
+
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/GoogleCloudPlatform/docker-credential-gcr
+      tag: v${{package.version}}
+      expected-commit: 62afb2723512fd6572c6300024e0c94f734b0ae3
+
+  - runs: |
+      # GHSA-232p-vwff-86mp
+      # GHSA-33pg-m6jh-5237
+      # GHSA-6wrf-mxfj-pf5p
+      go get -u github.com/docker/docker@v20.10.24+incompatible
+
+      #  GHSA-69cg-p879-7622
+      #  GHSA-vvpx-j8f3-3w6h
+      go get -u golang.org/x/net@v0.7.0
+
+      go mod tidy -compat=1.17
+      go mod vendor
+
+  - uses: go/build
+    with:
+      packages: .
+      output: docker-credential-gcr
+      ldflags: -s -w -X github.com/GoogleCloudPlatform/docker-credential-gcr/config.Version=${{package.version}}
+
+  - uses: strip
+
+update:
+  enabled: true
+  github:
+    identifier: GoogleCloudPlatform/docker-credential-gcr
+    strip-prefix: v
+    tag-filter: v
diff --git a/packages.txt b/packages.txt
index 991e3b5f1ae..63f2149721f 100644
--- a/packages.txt
+++ b/packages.txt
@@ -702,3 +702,4 @@ kaniko
 flux-image-automation-controller
 openai
 prometheus-nats-exporter
+docker-credential-gcr