diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..5360224
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,47 @@
+name: build
+
+on:
+  push:
+    branches: [ "main" ]
+    tags: '*'
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "main" ]
+
+permissions:
+  contents: write   # needed for releases
+
+jobs:
+  build:
+    name: Build
+    runs-on: "ubuntu-22.04"
+    
+    steps:
+      - name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332   # v4.1.7
+        with:
+          submodules: recursive
+
+      - name: Compile
+        uses: devcontainers/ci@a56d055efecd725e8cfe370543b6071b79989cc8   # v0.3.1900000349
+        with:
+          imageName: blobfuse2-alpine-build
+          push: never
+          runCmd: ./build-patch.sh
+
+      - name: Publish
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874  # v4.4.0
+        with:
+          name: blobfuse2-alpine
+          path: ./blobfuse2_Linux_musl_64bit
+
+      - name: Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191  # v2.0.8
+        with:
+          files: |
+            blobfuse2_Linux_musl_64bit
+          generate_release_notes: true
+          name: ${{ github.ref_name }}
+          prerelease: ${{ contains(github.ref_name, '-') }}
+          tag_name: ${{ github.ref }}