diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..13de55d
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,49 @@
+name: Build
+
+on:
+  push:
+    # remove add_build_workflow after we've tested that this works
+    branches: [ master, add_build_workflow ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '10'
+
+      - name: Install dependencies
+        run: yarn
+
+      - name: Run Build
+        run: yarn run build
+  deploy:
+    runs-on: ubuntu-latest
+    needs: build
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: '10'
+
+    - name: Install dependencies
+      run: yarn
+
+    - name: Configure AWS Credentials using OIDC
+      uses: aws-actions/configure-aws-credentials@v4
+      with:
+        # TODO: update ACCOUNT and UPLOAD_ROLE
+        role-to-assume: arn:aws:iam::<ACCOUNT>:role/<UPLOAD_ROLE>
+        role-session-name: github-action-account-link-extension-publish
+        aws-region: us-west-1
+
+    - name: Run Deploy
+      run: sh tools/cdn.sh
\ No newline at end of file