diff --git a/ci-dockerfiles-deployment/build-image.sh b/ci-dockerfiles-deployment/build-image.sh
new file mode 100644
index 0000000..277096d
--- /dev/null
+++ b/ci-dockerfiles-deployment/build-image.sh
@@ -0,0 +1,30 @@
+#!/bin/bash
+
+set -ex
+
+trap cleanup_exit INT TERM EXIT
+
+cleanup_exit()
+{
+    rm -rf ${HOME}/.docker dockerfiles
+}
+
+mkdir -p ${HOME}/.docker
+sed -e "s|\${DOCKER_AUTH}|${DOCKER_AUTH}|" < ${WORKSPACE}/config.json > ${HOME}/.docker/config.json
+chmod 0600 ${HOME}/.docker/config.json
+
+rm -rf dockerfiles/
+git clone --depth 1 https://git.trustedfirmware.org/ci/dockerfiles.git/
+
+cd dockerfiles/${image}/
+if ! ./build.sh; then
+    echo "=== FAIL: ${image} ==="
+    exit 1
+fi
+
+# now we have image name in .docker-tag
+if [ -r .docker-tag ]; then
+    docker_tag=$(cat .docker-tag)
+    docker push ${docker_tag}
+fi
+