diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..7c10be4
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,22 @@
+name: build and analyse
+
+on: [push]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        java-version: [ 11, 17 ]
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: 'temurin'
+          java-version: ${{ matrix.java-version }}
+          cache: 'maven'
+      - run: mvn -B install --no-transfer-progress
+      - name: Analyse code and publish to SonarQube 📊
+        run: mvn -B -Dsonar.password=${{ secrets.SONAR_PASSWORD }} sonar:sonar
diff --git a/pom.xml b/pom.xml
index 292508f..a603ece 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,6 +42,13 @@
     </snapshotRepository>
   </distributionManagement>
 
+  <properties>
+    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+    <sonar.host.url>https://sq.terrestris.de</sonar.host.url>
+    <sonar.login>terrestris</sonar.login>
+    <sonar.sources>src/main/</sonar.sources>
+  </properties>
+
   <profiles>
     <profile>
       <id>reporting</id>