diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
new file mode 100644
index 000000000..40f48470d
--- /dev/null
+++ b/.github/workflows/deploy.yaml
@@ -0,0 +1,21 @@
+---
+name: Deploy infrastructure
+on:
+  push:
+    branches:
+      - master
+jobs:
+  deploy:
+    name: Deploy infrastructure
+    runs-on: macos-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Install Flox
+        uses: flox/install-flox-action@v2
+      - name: Deploy with Pulumi
+        uses: flox/activate-action@v1
+        env:
+          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
+        with:
+          command: mise tasks run infrastructure:up
diff --git a/.mise.toml b/.mise.toml
old mode 100755
new mode 100644
index 6605f165c..bd8c34a90
--- a/.mise.toml
+++ b/.mise.toml
@@ -76,6 +76,6 @@ yamllint .
 [tasks."infrastructure:up"]
 description = "launch cloud infrastructure"
 run = """
-cd infrastructure 
-uv run pulumi up
+cd infrastructure
+uv run pulumi up --yes
 """