diff --git a/.gitignore b/.gitignore
index 5292b5c..ad428e7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@ output.png
 output*.png
 mask*.png
 *.jpg
+.env
diff --git a/Makefile b/Makefile
index 0ed10eb..e3724cc 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@ BLUR      ?= 0
 
 .DEFAULT_GOAL := help
 
-.PHONY: help build run up stop down logs log ps test test-mask dev sync shell clean fmt
+.PHONY: help build run up stop down logs log ps test test-mask dev sync shell clean fmt testpub
 
 help: ## Show this help
 	@grep -E '^[a-zA-Z_-]+:.*?## ' $(MAKEFILE_LIST) \
@@ -56,3 +56,9 @@ fmt: ## Format code with ruff
 clean: ## Stop the service and remove build artifacts
 	-$(COMPOSE) down
 	rm -f $(OUTPUT) mask.png
+
+testpub: ## Publish dist/ to TestPyPI (UV_PUBLISH_TOKEN from .env)
+	uv build
+	set -a && . ./.env && set +a && \
+		uv publish --publish-url https://test.pypi.org/legacy/ -t "$$UV_PUBLISH_TOKEN" --dry-run
+