diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 99f4596..aaa70e6 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -34,3 +34,6 @@ jobs:
        - name: Run sinker push (dry-run)
          run: ../sinker push --dryrun
          continue-on-error: true
+
+       - name: Run sinker push with magic manifest
+         run: ../sinker push --manifest .tigera.yaml
diff --git a/.tigera.yaml b/.tigera.yaml
new file mode 100644
index 0000000..0f5af69
--- /dev/null
+++ b/.tigera.yaml
@@ -0,0 +1,82 @@
+target:
+  host: ghcr.io
+  repository: stackhpc/calico
+  auth:
+    username: GHCR_USERNAME
+    password: GHCR_PASSWORD
+sources:
+# v3.25.2
+- repository: calico/apiserver
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/cni
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/csi
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/kube-controllers
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/node
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/node-driver-registrar
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/pod2daemon-flexvol
+  host: docker.io
+  tag: v3.25.2
+- repository: calico/typha
+  host: docker.io
+  tag: v3.25.2
+# v3.26.3
+- repository: calico/apiserver
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/cni
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/csi
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/kube-controllers
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/node
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/node-driver-registrar
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/pod2daemon-flexvol
+  host: docker.io
+  tag: v3.26.3
+- repository: calico/typha
+  host: docker.io
+  tag: v3.26.3
+# v3.27.0
+- repository: calico/apiserver
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/cni
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/csi
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/kube-controllers
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/node
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/node-driver-registrar
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/pod2daemon-flexvol
+  host: docker.io
+  tag: v3.27.0
+- repository: calico/typha
+  host: docker.io
+  tag: v3.27.0