diff --git a/.github/workflows/ecr.yml b/.github/workflows/ecr.yml
index 27c0c832..21f8f7ee 100644
--- a/.github/workflows/ecr.yml
+++ b/.github/workflows/ecr.yml
@@ -30,7 +30,8 @@ jobs:
 
       - uses: docker/setup-buildx-action@v3
 
-      - uses: docker/build-push-action@v6
+      - name: Build and push controller image
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: true
@@ -38,3 +39,19 @@ jobs:
           tags: ${{ steps.ecr-login.outputs.registry }}/sei/sei-k8s-controller:${{ inputs.tag || github.sha }}
           cache-from: type=registry,ref=${{ steps.ecr-login.outputs.registry }}/sei/build-cache:shared
           cache-to: type=registry,ref=${{ steps.ecr-login.outputs.registry }}/sei/build-cache:shared,mode=max
+
+      # The runner image is the orchestration container used by Chaos Mesh
+      # Workflows in scenarios/ — it ships its own per-kind Go text templates
+      # and applies SeiNodeTask CRs via the dynamic client. Built from the
+      # same repo context as the controller; the only difference is the
+      # Dockerfile path.
+      - name: Build and push seitask-runner image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: runner/Dockerfile
+          push: true
+          platforms: linux/amd64
+          tags: ${{ steps.ecr-login.outputs.registry }}/sei/seitask-runner:${{ inputs.tag || github.sha }}
+          cache-from: type=registry,ref=${{ steps.ecr-login.outputs.registry }}/sei/build-cache:shared
+          cache-to: type=registry,ref=${{ steps.ecr-login.outputs.registry }}/sei/build-cache:shared,mode=max