diff --git a/.github/workflows/release_publish-package.yml b/.github/workflows/release_publish-package.yml
index 20f25bfe0..16ebf1a45 100644
--- a/.github/workflows/release_publish-package.yml
+++ b/.github/workflows/release_publish-package.yml
@@ -42,4 +42,4 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           tag_name="${GITHUB_REF##*/}"
-          hub release edit -a crowdsec-release.tgz -a vendor.tgz -m "" "$tag_name"
+          hub release edit -a crowdsec-release.tgz -a vendor.tgz -a *-vendor.tar.xz -m "" "$tag_name"
diff --git a/Makefile b/Makefile
index 3f9512229..63edcd06a 100644
--- a/Makefile
+++ b/Makefile
@@ -209,14 +209,15 @@ localstack-stop:
 
 # build vendor.tgz to be distributed with the release
 .PHONY: vendor
-vendor:
+vendor: vendor-remove
 	$(GO) mod vendor
-	tar -czf vendor.tgz vendor
+	tar czf vendor.tgz vendor
+	tar --create --auto-compress --file=$(RELDIR)-vendor.tar.xz vendor
 
 # remove vendor directories and vendor.tgz
 .PHONY: vendor-remove
 vendor-remove:
-	$(RM) vendor vendor.tgz
+	$(RM) vendor vendor.tgz *-vendor.tar.xz
 
 .PHONY: package
 package: