diff --git a/.tangled/workflows/ci.yaml b/.tangled/workflows/ci.yaml
new file mode 100644
index 0000000..3167d71
--- /dev/null
+++ b/.tangled/workflows/ci.yaml
@@ -0,0 +1,18 @@
+engine: microvm
+image: nixos
+
+when:
+  - event: ["push", "pull_request"]
+    branch: ["main"]
+
+steps:
+  - name: test
+    command: nix develop --command just test
+
+  - name: fmt
+    command: |
+      nix develop --command cargo fmt --check
+      nix develop --command bash -c 'find . -name "*.nix" -not -path "./target/*" -not -path "./.direnv/*" | xargs nixfmt --check'
+
+  - name: clippy
+    command: nix develop --command cargo clippy --all-targets -- -D warnings