diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..45ebd57
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    labels:
+      - mergewhenready
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b8e2d40..155b988 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,5 +16,10 @@ jobs:
     steps:
     - name: Checkout
       uses: actions/checkout@v7
-    - name: Build
-      run: /usr/bin/true
+    - uses: actions/setup-go@v6
+      with:
+        go-version: stable
+    - name: Install policy-bot
+      run: go install github.com/palantir/policy-bot@latest
+    - name: Validate policy-bot
+      run: policy-bot validate -p policy.yml