diff --git a/.github/workflows/pkg-release-reusable-workflow.yml b/.github/workflows/pkg-release-reusable-workflow.yml
index 0926ed8..81b6694 100644
--- a/.github/workflows/pkg-release-reusable-workflow.yml
+++ b/.github/workflows/pkg-release-reusable-workflow.yml
@@ -809,6 +809,29 @@ jobs:
           mkdir -p build-area
           tar -C build-area -xzf docker-build-area.tgz
 
+      - name: Generate metadata.json
+        env:
+          SRCPKG_NAME: ${{ needs.prepare-release-source.outputs.srcpkg_name }}
+          SRCPKG_VERSION: ${{ needs.prepare-release-source.outputs.release_version }}
+          SUITE: ${{ needs.build-and-test.outputs.suite }}
+        run: |
+          set -euxo pipefail
+          python3 - build-area/metadata.json <<'PY'
+          import json
+          import os
+          import sys
+
+          data = {
+              "source-package": os.environ["SRCPKG_NAME"],
+              "version": os.environ["SRCPKG_VERSION"],
+              "suite": os.environ["SUITE"],
+          }
+
+          with open(sys.argv[1], "w") as f:
+              json.dump(data, f, indent=2)
+              f.write("\n")
+          PY
+
       - name: Stage debs for S3 proposed upload
         env:
           SUITE: ${{ needs.build-and-test.outputs.suite }}
@@ -819,7 +842,7 @@ jobs:
           if [ "${#debs[@]}" -eq 0 ]; then
             echo "No .deb files found in build-area; skipping debs.tar.gz creation"
           else
-            tar -czf s3-proposed/debs.tar.gz -C build-area "${debs[@]}"
+            tar -czf s3-proposed/debs.tar.gz -C build-area "${debs[@]}" metadata.json
           fi
 
       - name: Upload proposed debs and provenance to S3