diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml
new file mode 100644
index 0000000..1f95138
--- /dev/null
+++ b/.github/workflows/pr-build.yml
@@ -0,0 +1,49 @@
+on: push
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout sidecar project
+        uses: actions/checkout@v4
+
+      - name: Setup Go environment
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.21'
+
+      - name: "compile"
+        run: |
+          go version
+          go mod vendor
+          make test
+          make build-all
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Sign windows binaries
+        run: >
+          docker run --rm
+          -e 'CODESIGN_USER=$CODESIGN_USER'
+          -e 'CODESIGN_PASS=$CODESIGN_PASS'
+          -e 'CODESIGN_TOTP_SECRET=$CODESIGN_TOTP_SECRET'
+          -e 'CODESIGN_CREDENTIAL_ID=$CODESIGN_CREDENTIAL_ID'
+          -v $(pwd):/home/jenkins
+          graylog/internal-codesigntool:latest
+          make sign-binaries
+        env:
+          CODESIGN_USER: ${{ secrets.CODESIGN_USER }}
+          CODESIGN_PASS: ${{ secrets.CODESIGN_PASS }}
+          CODESIGN_TOTP_SECRET: ${{ secrets.CODESIGN_TOTP_SECRET }}
+          CODESIGN_CREDENTIAL_ID: ${{ secrets.CODESIGN_CREDENTIAL_ID }}
+
+        
+