diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 5d942ed..bb368ad 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -30,3 +30,16 @@ release:
   github:
     owner: pete911
     name: kubectl-iam4sa
+brews:
+  - repository:
+      owner: pete911
+      name: homebrew-tap
+      token: "{{ .Env.GITHUB_TOKEN }}"
+    name: kubectl-iam4sa
+    homepage: "https://github.com/pete911/kubectl-iam4sa"
+    description: "debug IAM roles for service accounts"
+    folder: Formula
+    install: |
+      bin.install "kubectl-iam4sa"
+    test: |
+      assert_match /Usage/, shell_output("#{bin}/kubectl-iam4sa -h", 0)
diff --git a/README.md b/README.md
index 6683c07..006ee76 100644
--- a/README.md
+++ b/README.md
@@ -97,3 +97,20 @@ policy with output from `kubectl-iam4sa cluster` output.
 
 In the example above, we can see in the failed events, that the pod is requesting `prometheus-ingest` role, but the role
 that is set in annotation is `prometheus`. In this case most likely the pod needs to be restarted.
+
+## download
+
+- [binary](https://github.com/pete911/kubectl-iam4sa/releases)
+
+## build/install
+
+### brew
+
+- add tap `brew tap pete911/tap`
+- install `brew install kubectl-iam4sa`
+
+### go
+
+[go](https://golang.org/dl/) has to be installed.
+- build `go build`
+- install `go install`