diff --git a/.bundlemonrc b/.bundlemonrc
new file mode 100644
index 000000000..bc6188538
--- /dev/null
+++ b/.bundlemonrc
@@ -0,0 +1,15 @@
+{
+    "baseDir": "./build-browser",
+    "files": [
+        {
+            "path": "app/main.<hash>.js"
+        },
+        {
+            "path": "app/main.js"
+        },
+        {
+            "path": "app/vendor.js"
+        }
+    ],
+    "reportOutput": ["github"]
+}
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
new file mode 100644
index 000000000..cc3db76e5
--- /dev/null
+++ b/.github/workflows/ci-cd.yml
@@ -0,0 +1,43 @@
+name: CI/CD
+
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+      - '[0-9]+.[0-9]+.[0-9]+-beta.[0-9]+'
+
+env:
+  MATTERMOST_CHANNEL: '{"dev":"feat---password-mgr","beta":"feat---password-mgr,publication","stable":"feat---password-mgr,publication"}'
+  MATTERMOST_HOOK_URL: ${{ secrets.MATTERMOST_HOOK_URL }}
+  REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
+  BUNDLEMON_PROJECT_ID: ${{ secrets.BUNDLEMON_PROJECT_ID }}
+
+jobs:
+  build:
+    name: Build and publish
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile
+      - name: Lint
+        run: yarn lint
+      - name: Build
+        run: yarn build:browser:prod
+      - name: BundleMon
+        uses: lironer/bundlemon-action@v1
+      - name: Set SSH for downcloud
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.DOWNCLOUD_SSH_KEY }}
+      - name: Publish
+        if: github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/')
+        run: yarn run cozyPublish --yes
diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index 9fef06b82..000000000
--- a/.travis.yml
+++ /dev/null
@@ -1,47 +0,0 @@
-language: node_js
-matrix:
-  fast_finish: true
-node_js:
-- '14'
-branches:
-  only:
-  - master
-  # tags
-  - /^\d+\.\d+\.\d+(\-beta.\d+)?$/
-env:
-  global:
-    - MATTERMOST_CHANNEL='{"dev":"feat---password-mgr","beta":"feat---password-mgr,publication","stable":"feat---password-mgr,publication"}'
-    # GITHUB_TOKEN for yarn deploy script
-    - secure: "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"
-    # REGISTRY_TOKEN for yarn cozyPublish script
-    - secure: "wMOM7oD/Q//k8dho5K/dn+BagOeCMXm/60XJ+Gb07C4w6ynuQgiuANPM6f5eguflodTUX0Sv5D7x+y8+bITPc1aI7QbVDWphJa7UrCfNKgkTvU39jWDFkG1ZdYom6cngoosZ18ndVJ/L6K7YpM0FvmIl9tGneXIWbZoy2rBeoqMff1Ispc34TcKEvMyKyNgxaVb32vcp4nwDzwrHjjWAhSElfUCk5SAqb7ThtTGgWwWAfxhuQ1WxVI2QmM1fabuYaT5eXwrMlS9XG67QXwRash+9MG554J3CM0vG6RIVc2ThJp/ptaR9ASlimYSn29+E5EiAEAJdF9JQD07OKW2E2+UD8M9QWzQhp3x6kGj1YZY68DEBvQGcBFvoyW+0wPdTUbJXiFpy0hmiFxeV5F3Dux00y2Hi7arPq5ma+eh5oLwE+Z1QlBswMth57yiRtMJCv9EY0xmOveNpHmaUz9paXgZU5u9r2imubkVtUCCXd5iBwNX20MU0q5frGKLDeG+nVBJ6+g84nia3KgSG9tV+xRjSvsBpB6tUPbLzjNQTcyvqIIHv6chW5/9dVPxfk3grfOjpzh6mdd/F3qIP1cqOXqq118KJmRteZLmbharGqVbKbwZpA9pjf8JsuONvSmZm7LIoVwoGGKggWi5uybysH/IkMtho1m7qQfAdkI2f/mI="
-    # MATTERMOST_HOOK_URL for yarn cozyPublish script
-    - secure: "eHY0FQI3/rY1Q1gQkcNmLJo/LK0IyPyNrcVqbtYbMP7MmHBXAYh10JmKW2A8DbHmIE364J4kkCMYRICpn4lxXcTe2p3zBYy03q4bzwoKUpyTxUI0zjOeHQnGb1AsiP8mO3kAgontXbCl0X29AhmaQotK6jrQV+2ZEQ6jtyqe/ByZGPlsE1xVhOJgbREM2nSAidP3OcBzW7tsEeIciPYqoB9LsiSfzNM5nkfUodxO36gkh05tP3gE6Y8zP4HsbnUUHGafjpLLhRviIrK/DB8aDUzbxHRK7/g2D0FYsM8HYYfO3i/Agegt5/ImY2KM+K0mrn5UVDqFfhkSVjBetdiZCxSzC4rx+ljr9Kxp0deu/02ckapRj9x6PPLTs3BPWZT/h7IxTNYnpOpCIipHRtgyLjqH1ycvrHc+y7h5vOzX6hM/sF14LFp2RWddhQgr+iCXSIg6jK0OVPGdt57pum+hnZH2Yl96oSd8+YJG51KduOYau2iXrTtYu8XoYEdijxyMfzf6hueop/ymsr+3unbRzfrBrOkaYz2Yn+H8thY7VY1ofJoL2Ebmt8kIeRBx6sYcuVvfqOIxJItJxYegUGDFmIq02SMftOhT19MkzMJatVYPuwzP7RhKMkCy+0LCTNxP7RZ0W9Zgo7SRMF+cihkzn0SgtE/oLro/e/DNYsAG/gg="
-cache:
-  yarn: true
-  directories:
-  - node_modules
-script:
-  - npm run lint
-  - npm run build:browser:prod
-before_install:
-  - sudo apt-get install libsecret-1-dev
-  - if [ "$TRAVIS_SECURE_ENV_VARS" != "false" ]; then openssl aes-256-cbc -K $encrypted_95a52b3b9b3c_key -iv $encrypted_95a52b3b9b3c_iv -in id_rsa_downcloud_cozy_pass_web.enc -out id_rsa_downcloud_cozy_pass_web -d; fi
-  - if [ "$TRAVIS_SECURE_ENV_VARS" != "false" ]; then eval "$(ssh-agent -s)"; fi
-  - if [ "$TRAVIS_SECURE_ENV_VARS" != "false" ]; then chmod 600 id_rsa_downcloud_cozy_pass_web; fi
-  - if [ "$TRAVIS_SECURE_ENV_VARS" != "false" ]; then ssh-add id_rsa_downcloud_cozy_pass_web; fi 
-before_deploy:
-  - yarn add cozy-app-publish
-deploy:
-  - provider: script
-    skip_cleanup: true
-    # deploy the build on downcloud and publish to the Cozy registry
-    script: yarn cozyPublish
-    on:
-      branch: master
-  - provider: script
-    skip_cleanup: true
-    # publish stable or beta versions using Github Releases (git tag)
-    script: yarn cozyPublish
-    on:
-      tags: true
\ No newline at end of file
diff --git a/id_rsa_downcloud_cozy_pass_web.enc b/id_rsa_downcloud_cozy_pass_web.enc
deleted file mode 100644
index ce6427a0b..000000000
Binary files a/id_rsa_downcloud_cozy_pass_web.enc and /dev/null differ
diff --git a/package.json b/package.json
index f47118c33..253f9d760 100644
--- a/package.json
+++ b/package.json
@@ -53,6 +53,7 @@
     "@types/zxcvbn": "^4.4.1",
     "babel-loader": "^8.2.2",
     "babel-preset-cozy-app": "^1.11.0",
+    "bundlemon": "1.4.0",
     "clean-webpack-plugin": "^3.0.0",
     "concurrently": "^6.0.2",
     "copy-webpack-plugin": "^6.4.0",