diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..ce9d362
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,23 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+env: 
+  TARGET_FLAKE: github:${{ github.repository }}/${{ inputs.sha || github.sha }}
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: "write"
+      contents: "read"
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+      - uses: DeterminateSystems/flake-checker-action@main
+      - name: Run `nix build`
+        run: GC_DONT_GC=1 nix build --accept-flake-config --show-trace --log-lines
+          10000 --fallback "$TARGET_FLAKE#"'nixosConfigurations.surface.config.boot.kernelPackages.kernel'