diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml
index 472c26f19..6f59e2701 100644
--- a/.github/workflows/ubuntu.yml
+++ b/.github/workflows/ubuntu.yml
@@ -36,7 +36,7 @@ jobs:
 
       - name: Install apt dependencies
         run: |
-            sudo apt install --fix-missing -y libgsl-dev cmake autoconf libboost-test-dev libboost-program-options-dev
+            sudo apt install --fix-missing -y libgsl-dev cmake autoconf libboost-test-dev libboost-program-options-dev valgrind
 
       - name: Install cbindgen
         uses: baptiste0928/cargo-install@v3
@@ -122,6 +122,14 @@ jobs:
         run: |
           cmake --build build -t test
 
+      - name: Run C++ tests through valgrind
+        run: |
+          # NOTE: applying valgrind at the cmake level
+          # using the command in the previous step gives
+          # "leaks", but they come from cmake and not our
+          # test binary.  So, we run it manually.
+          valgrind ./build/cpptests/fwdpy11_cpp_tests
+
       - name: Clean cmake build
         run: |
           rm -rf build