diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..cdc0c25
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,22 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '8'
+          cache: maven
+
+      - name: Build and test
+        run: ./mvnw -B verify
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..cce10e5
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security Policy
+
+## Supported Versions
+
+| Version                  | Supported          |
+| ------------------------ | ------------------ |
+| `master` (0.1.0)         | :white_check_mark: |
+| Older releases/branches  | :x:                |
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities **privately** through GitHub Security
+Advisories: open the repository's **Security** tab and click
+**"Report a vulnerability"**.
+
+**Do not open public GitHub issues for security vulnerabilities.**
+
+We aim to acknowledge and respond to vulnerability reports within
+**5 business days**.
diff --git a/mvnw b/mvnw
old mode 100644
new mode 100755