diff --git a/.github/workflows/buf.yml b/.github/workflows/buf.yml
new file mode 100644
index 000000000..2e52574e2
--- /dev/null
+++ b/.github/workflows/buf.yml
@@ -0,0 +1,22 @@
+name: protobuf checks
+on:
+  push:
+    paths:
+      - '**.proto'
+permissions:
+  contents: read
+  pull-requests: read
+jobs:
+  buf:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: bufbuild/buf-action@8c6a16e16f12ba20b6470afa9c2ba9b5ba8c97c3 # v1.5.0
+        with:
+          format: false
+          lint: false
+          push: false
+          archive: false