diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..a56f2d2
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,10 @@
+# https://editorconfig.org
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
new file mode 100644
index 0000000..dc13483
--- /dev/null
+++ b/.github/workflows/test.yaml
@@ -0,0 +1,36 @@
+name: Integration tests
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  checks:
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      id-token: write
+    env:
+      FLAKEHUB_API_ENDPOINT: "api.flakehub.com"
+      FLAKEHUB_WEB_ENDPOINT: "https://flakehub.com"
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Get JWT
+        id: jwt
+        run: |
+          REQUEST_TOKEN="${ACTIONS_ID_TOKEN_REQUEST_TOKEN}"
+          ROOT_URL="${ACTIONS_ID_TOKEN_REQUEST_URL}"
+          JWT_ID_TOKEN=$(curl \
+            --header "authorization: bearer ${REQUEST_TOKEN}" \
+            --header "accept: application/json;api-version=2.0" \
+            --header "content-type: application/json" \
+            --header "user-agent: magic-nix-cache" \
+            "${ROOT_URL}&audience=${{ env.FLAKEHUB_API_ENDPOINT }}")
+
+          echo "::set-output name=token::${JWT_ID_TOKEN}"
+
+      - name: Display token
+        run: |
+          echo "${{ steps.jwt.outputs.token }}"