diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..718572b
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
new file mode 100644
index 0000000..f961da0
--- /dev/null
+++ b/.github/workflows/check.yml
@@ -0,0 +1,16 @@
+name: "Check flake"
+
+on:
+  push:
+    paths:
+      - "**.nix"
+      - "**.lock"
+      - ".github/workflows/check.yml"
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: cachix/install-nix-action@v22
+      - run: nix flake check --show-trace --accept-flake-config