diff --git a/.github/workflows/authenticate-commits.yml b/.github/workflows/authenticate-commits.yml
new file mode 100644
index 0000000..82037e4
--- /dev/null
+++ b/.github/workflows/authenticate-commits.yml
@@ -0,0 +1,24 @@
+name: authenticate-commits
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+jobs:
+  authenticate-commits:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+
+    steps:
+      - name: Authenticating commits
+        uses: sequoia-pgp/authenticate-commits@v1
+        env:
+          COMMENT: on-error
+        with:
+          # To reduce the workflow's verbosity, use 'on-error'
+          # to only post a comment when an error occurs, or 'never' to
+          # never post a comment.  (In all cases the information is
+          # still available in the step's summary.)
+          comment: on-error