diff --git a/.github/workflows/lint-test.yaml b/.github/workflows/lint-test.yaml
new file mode 100644
index 0000000..2d5ace8
--- /dev/null
+++ b/.github/workflows/lint-test.yaml
@@ -0,0 +1,74 @@
+name: test
+env:
+  ENV: true
+  ALGORITHMS: ${{ secrets.ALGORITHMS }}
+  API_AUDIENCE: ${{ secrets.API_AUDIENCE }}
+  APP_SECRET_KEY: ${{ secrets.APP_SECRET_KEY }}
+  AUTH0_CLIENT_ID: ${{ secrets.AUTH0_CLIENT_ID }}
+  AUTH0_CLIENT_SECRET: ${{ secrets.AUTH0_CLIENT_SECRET }}
+  AUTH0_DOMAIN: ${{ secrets.AUTH0_DOMAIN }}
+  BEARER_TOKEN_UNAUTHORIZED: ${{ secrets.BEARER_TOKEN_UNAUTHORIZED }}
+  ISSUER: ${{ secrets.ISSUER }}
+
+permissions: read-all
+
+on: push
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      #----------------------------------------------
+      #       check-out repo and set-up python
+      #----------------------------------------------
+      - name: Check out repository
+        uses: actions/checkout@v3
+      - name: Set up python
+        id: setup-python
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+      #----------------------------------------------
+      #  -----  install & configure poetry  -----
+      #----------------------------------------------
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+        with:
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+          installer-parallel: true
+
+      #----------------------------------------------
+      #       load cached venv if cache exists
+      #----------------------------------------------
+      - name: Load cached venv
+        id: cached-poetry-dependencies
+        uses: actions/cache@v3
+        with:
+          path: .venv
+          key: venv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('**/poetry.lock') }}
+      #----------------------------------------------
+      # install dependencies if cache does not exist
+      #----------------------------------------------
+      - name: Install dependencies
+        if: steps.cached-poetry-dependencies.outputs.cache-hit != 'true'
+        run: poetry install --no-interaction --no-root --with dev
+      #----------------------------------------------
+      # install your root project, if required
+      #----------------------------------------------
+      - name: Install project
+        run: poetry install --no-interaction --with dev
+      #----------------------------------------------
+      #               lint
+      # ---------------------------------------------
+      - name: Run linter
+        run: |
+          source .venv/bin/activate
+          flake8
+      #----------------------------------------------
+      #              run test suite
+      #----------------------------------------------
+      - name: Run tests
+        run: |
+          source .venv/bin/activate
+          pytest tests/
diff --git a/tests/test_dummy.py b/tests/test_dummy.py
new file mode 100644
index 0000000..f4f5361
--- /dev/null
+++ b/tests/test_dummy.py
@@ -0,0 +1,2 @@
+def test_dummy():
+    assert True