diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
new file mode 100644
index 00000000..640c7f2f
--- /dev/null
+++ b/.github/workflows/lint.yml
@@ -0,0 +1,13 @@
+name: lint
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - run: pip install --user codespell[toml] ruff
+    - run: codespell
+    - run: ruff check --output-format=github
diff --git a/pyproject.toml b/pyproject.toml
index 3db8907f..05ee2b3a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -5,3 +5,18 @@ requires = [
     "setuptools >= 66.1"
 ]
 build-backend = "setuptools.build_meta"
+
+[tool.codespell]
+ignore-words-list = "alltime,blong,ccompiler,fo,hel"
+skip = "*.bak"
+
+[tool.ruff.lint]
+select = [
+  "E9",
+  "F63",
+  "F7",
+  "F82",
+]
+[tool.ruff.lint.per-file-ignores]
+"src/cffi/verifier.py" = ["F821"]
+"testing/*" = ["F821"]