diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b291403..498e2ca 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -26,11 +26,20 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Expose environment
+        run: echo '${{ toJSON(github) }}'
+
       - name: set tag
+        if: ${{ !env.ACT }}
         run: |
           BRANCH_NAME=${{ github.head_ref || github.ref_name }}
           echo TAG=${{ env.TAG_PREFIX}}-${BRANCH_NAME/\//_} >> $GITHUB_ENV
 
+      - name: set tag when running locally in act
+        if: ${{ env.ACT }}
+        run: |
+          echo TAG=latest >> $GITHUB_ENV
+
       - name: Set up docker structure test
         run: >
           curl -LO
@@ -39,6 +48,7 @@ jobs:
           /usr/local/bin/container-structure-test
 
       - name: Configure AWS Credentials
+        if: ${{ !env.ACT }}
         uses: aws-actions/configure-aws-credentials@v4
         with:
           audience: sts.amazonaws.com
@@ -46,6 +56,7 @@ jobs:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
 
       - name: Login to ECR
+        if: ${{ !env.ACT }}
         uses: docker/login-action@v3
         with:
           registry: ${{ vars.ECR_REGISTRY }}
@@ -62,9 +73,26 @@ jobs:
           container-structure-test test --image ${{ env.TAG }} --config tests/config.yaml
 
       - name: Build and push
+        if: ${{ !env.ACT }}
         uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ vars.ECR_REGISTRY }}/${{ vars.ECR_REPOSITORY }}:${{ env.TAG }}
+
+  staging_deploy_plan:
+    runs-on: ubuntu-latest
+    environment: staging
+    needs: build_test_push
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Gruntwork Terragrunt
+        uses: gruntwork-io/terragrunt-action@v2.0.0
+        with:
+          tf_version: '1.5.7'
+          tg_version: '0.51.0'
+          tg_dir: './deploy/tg'
+          tg_command: 'run-all plan'