diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..019e856
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,18 @@
+name: Build
+on:
+  push:
+    paths-ignore::
+      - "README.md"
+
+jobs:
+  build_matrix:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        target: [debug, release]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Build ${{ matrix.os }} - ${{ matrix.target }}
+        timeout-minutes: 6
+        uses: actions/checkout@v3.5.3
+      - run: make ${{ matrix.target }}
diff --git a/README.md b/README.md
index a910a51..a03cfb2 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,8 @@
 # ZeroTier Pylon
 Proxy layer 5 traffic from your apps to and from your ZeroTier virtual network without installing ZeroTier and without bringing up any new network interfaces.
 
+![Build](https://github.com/zerotier/pylon/actions/workflows/build.yml/badge.svg?branch=main)
+
 ## Build
 
 Currently the build process will pull a submodule (which itself pulls submodules), build libzt there, and then link pylon against the resultant `libzt.a` static library. Requires `clang`, and `cmake` to build.