diff --git a/packages.txt b/packages.txt
index c6c283d9fd5..b13b5c25ff3 100644
--- a/packages.txt
+++ b/packages.txt
@@ -850,4 +850,6 @@ ipset
 nuclei
 wasmer
 libzip
+wit-bindgen
+wasm-tools
 corepack
diff --git a/wasm-tools.yaml b/wasm-tools.yaml
new file mode 100644
index 00000000000..45211acfed0
--- /dev/null
+++ b/wasm-tools.yaml
@@ -0,0 +1,38 @@
+package:
+  name: wasm-tools
+  version: 1.0.35
+  epoch: 0
+  description: "Low level tooling for WebAssembly in Rust"
+  copyright:
+    - license: Apache-2.0
+
+environment:
+  contents:
+    packages:
+      - rust
+      - libLLVM-15
+      - wolfi-base
+      - busybox
+      - ca-certificates-bundle
+      - build-base
+
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/bytecodealliance/wasm-tools
+      tag: wasm-tools-${{package.version}}
+      expected-commit: eb0266b8082176151f0ae8210edf3404de227913
+
+  - name: Configure and build
+    runs: |
+      cargo build --release -vv
+      mkdir -p ${{targets.destdir}}/usr/bin/
+      mv target/release/wasm-tools ${{targets.destdir}}/usr/bin/
+
+  - uses: strip
+
+update:
+  enabled: true
+  github:
+    identifier: bytecodealliance/wasm-tools
+    strip-prefix: wasm-tools-
diff --git a/wit-bindgen.yaml b/wit-bindgen.yaml
new file mode 100644
index 00000000000..035869251f6
--- /dev/null
+++ b/wit-bindgen.yaml
@@ -0,0 +1,38 @@
+package:
+  name: wit-bindgen
+  version: 0.8.0
+  epoch: 0
+  description: "A language binding generator for WebAssembly interface types"
+  copyright:
+    - license: Apache-2.0
+
+environment:
+  contents:
+    packages:
+      - rust
+      - libLLVM-15
+      - wolfi-base
+      - busybox
+      - ca-certificates-bundle
+      - build-base
+
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/bytecodealliance/wit-bindgen
+      tag: wit-bindgen-cli-${{package.version}}
+      expected-commit: 544576ea94bbddbb893f91cba8e16f5cce8a7472
+
+  - name: Configure and build
+    runs: |
+      cargo build --release -vv
+      mkdir -p ${{targets.destdir}}/usr/bin/
+      mv target/release/wit-bindgen ${{targets.destdir}}/usr/bin/
+
+  - uses: strip
+
+update:
+  enabled: true
+  github:
+    identifier: bytecodealliance/wit-bindgen
+    strip-prefix: wit-bindgen-cli-