diff --git a/.github/workflows/helmfile-linter.yml b/.github/workflows/helmfile-linter.yml
new file mode 100644
index 000000000..775efcaad
--- /dev/null
+++ b/.github/workflows/helmfile-linter.yml
@@ -0,0 +1,22 @@
+name: Helmfile lint
+run-name: Helmfile lint
+
+on:
+  pull_request:
+    branches:
+      - 'main'
+
+jobs:
+  helmfile-lint:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/helmfile/helmfile:latest
+    steps:
+      -
+        uses: numerique-gouv/action-helmfile-lint@main
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          age-key: ${{ secrets.SOPS_PRIVATE }}
+          private-key: ${{ secrets.PRIVATE_KEY }}
+          helmfile-src: "src/helm"
+          repositories: "people,secrets"
diff --git a/secrets b/secrets
index 2572ba98d..7484f212c 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit 2572ba98d3efbb11c6eb9520ef558443af9638b8
+Subproject commit 7484f212c522d68891ce31197dd7dba62c4be095