diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
new file mode 100644
index 0000000000..5ebbd0f6c8
--- /dev/null
+++ b/.github/workflows/ci-cd.yml
@@ -0,0 +1,46 @@
+name: CI/CD
+
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+      - '[0-9]+.[0-9]+.[0-9]+-beta.[0-9]+'
+
+env:
+  MATTERMOST_CHANNEL: '{"dev":"app---home","beta":"app---home,publication","stable":"app---home,publication"}'
+  MATTERMOST_HOOK_URL: ${{ secrets.MATTERMOST_HOOK_URL }}
+  REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
+  TARGETS_DEV: recette.cozy.works
+  TARGETS_BETA: betatest.cozy.works
+
+jobs:
+  build:
+    name: Build and publish
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile
+      - name: Lint
+        run: yarn lint
+      - name: Test
+        run: yarn test
+      - name: Build
+        run: yarn build
+      - name: Bundlemon
+        run: yarn bundlemon
+      - name: Set SSH for downcloud
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.DOWNCLOUD_SSH_KEY }}
+      - name: Deploy
+        if: github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/')
+        run: yarn cozyPublish --yes