diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
new file mode 100644
index 0000000..4cced06
--- /dev/null
+++ b/.github/workflows/build.yaml
@@ -0,0 +1,25 @@
+name: build
+on: push
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    env:
+      ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+    steps:
+      - uses: actions/checkout@v3
+      - uses: cachix/install-nix-action@v20
+      - uses: cachix/cachix-action@v12
+        with:
+          name: rose
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: Build Nix
+        run: nix build -j8 .#devShells.x86_64-linux.default
+      - name: Typecheck
+        if: success() || failure()  # Means that we run all steps even if one fails.
+        run: nix develop --command make typecheck
+      - name: Test
+        if: success() || failure()
+        run: nix develop --command make test
+      - name: Lint
+        if: success() || failure()
+        run: nix develop --command make lintcheck