diff --git a/.woodpecker.yml b/.woodpecker.yml
index 65e5197..31d778f 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -1,8 +1,25 @@
+when:
+  branch: main
+  event: push
+
 steps:
   - name: build-and-push
     image: gcr.io/kaniko-project/executor:debug
     commands:
       - mkdir -p /kaniko/.docker
-      - echo '{"auths":{"git.mikhailkilin.ru":{"username":"'$DOCKER_USERNAME'","password":"'$DOCKER_PASSWORD'"}}}' > /kaniko/.docker/config.json
-      - /kaniko/executor --context=. --destination=git.mikhailkilin.ru/killingdruid/bcard:latest --insecure --skip-tls-verify
+      - echo "{\"auths\":{\"git.mikhailkilin.ru\":{\"username\":\"${DOCKER_USERNAME}\",\"password\":\"${DOCKER_PASSWORD}\"}}}" > /kaniko/.docker/config.json
+      - /kaniko/executor --context=. --destination=git.mikhailkilin.ru/killingdruid/bcard:${CI_COMMIT_SHA:0:8} --destination=git.mikhailkilin.ru/killingdruid/bcard:latest --insecure --skip-tls-verify
+    secrets: [docker_username, docker_password]
+
+  - name: update-manifests
+    image: alpine
+    commands:
+      - apk add --no-cache git curl
+      - TAG=${CI_COMMIT_SHA:0:8}
+      - "sed -i \"s|image: git.mikhailkilin.ru/killingdruid/bcard:.*|image: git.mikhailkilin.ru/killingdruid/bcard:$TAG|\" k8s/bcard.yaml"
+      - git config user.email "ci@mikhailkilin.ru"
+      - git config user.name "Woodpecker CI"
+      - git add k8s/bcard.yaml
+      - "git diff --cached --quiet && echo \"No changes\" || git commit -m \"[skip ci] deploy bcard:$TAG\""
+      - git push https://${DOCKER_USERNAME}:${DOCKER_PASSWORD}@git.mikhailkilin.ru/killingdruid/bcard.git HEAD:main
     secrets: [docker_username, docker_password]