diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..3702444
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,15 @@
+# Any change to files in the root directory, any later match takes precedence.
+* @NTBBloodbath @vhyrro @mrcjkb
+
+# Documentation
+*.md @NTBBloodbath @vhyrro @mrcjkb
+doc/ @NTBBloodbath @vhyrro @mrcjkb
+
+# Plugin files
+lua/ @NTBBloodbath @vhyrro @mrcjkb
+spec/ @NTBBloodbath @vhyrro @mrcjkb
+plugin/ @NTBBloodbath @vhyrro @mrcjkb
+
+# Nix
+nix/ @mrcjkb @teto
+flake.* @mrcjkb @teto
diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
new file mode 100644
index 0000000..30cd7aa
--- /dev/null
+++ b/.github/workflows/checks.yaml
@@ -0,0 +1,26 @@
+---
+name: "Checks"
+on:
+  pull_request:
+  push:
+  workflow_call:
+jobs:
+  checks:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: cachix/install-nix-action@v22
+      with:
+        name: neorocks
+        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+    - run: nix flake check -L --accept-flake-config
+  shell:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: cachix/install-nix-action@v22
+    - uses: cachix/cachix-action@v12
+      with:
+        name: neorocks
+        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+    - run: nix build .#devShells.x86_64-linux.default -L --accept-flake-config