diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..9c1b9c4
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,56 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  check:
+    name: Flake check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: cachix/install-nix-action@v30
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+
+      - name: Check flake evaluation
+        run: nix flake check --no-build --all-systems
+
+      - name: Lint with statix
+        run: nix run nixpkgs#statix -- check .
+        continue-on-error: true
+
+  build:
+    name: Build NixOS configuration
+    runs-on: ubuntu-latest
+    needs: check
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: cachix/install-nix-action@v30
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+            extra-platforms = aarch64-linux
+
+      - name: Set up QEMU for aarch64 emulation
+        uses: docker/setup-qemu-action@v3
+        with:
+          platforms: arm64
+
+      - name: Build finite system
+        run: |
+          nix build .#nixosConfigurations.finite.config.system.build.toplevel \
+            --system aarch64-linux \
+            --print-build-logs
+
+      - name: Scan for CVEs with vulnix
+        run: nix run nixpkgs#vulnix -- --system ./result
+        continue-on-error: true
diff --git a/README.md b/README.md
index 6a0e4c8..9e0f692 100644
--- a/README.md
+++ b/README.md
@@ -15,6 +15,14 @@
         <img src="https://img.shields.io/badge/Ko--fi-Support-9B7EDE?style=for-the-badge&logo=ko-fi&logoColor=D9E0EE&labelColor=302D41">
     </a>
 </p>
+<p align="center">
+    <a href="https://github.com/wh1le/finite/actions/workflows/ci.yml">
+        <img src="https://img.shields.io/github/actions/workflow/status/wh1le/finite/ci.yml?branch=main&style=flat&logo=github&label=CI&color=F2CDCD&logoColor=D9E0EE&labelColor=302D41">
+    </a>
+    <a href="https://github.com/wh1le/finite/releases/latest">
+        <img src="https://img.shields.io/github/v/release/wh1le/finite?style=flat&logo=github&label=release&color=F2CDCD&logoColor=D9E0EE&labelColor=302D41">
+    </a>
+</p>
 
 <h1 align="center">Finite</h1>
 
diff --git a/settings.nix b/settings.nix
index e85357c..b7dc0e7 100644
--- a/settings.nix
+++ b/settings.nix
@@ -1,4 +1,6 @@
 {
+  VERSION = "1.0.0";
+
   STATE_VERSION = "25.05";
   SYSTEM = "aarch64-linux";