diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
new file mode 100644
index 0000000..0685318
--- /dev/null
+++ b/.github/workflows/verify.yml
@@ -0,0 +1,20 @@
+name: Verify
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+
+
+jobs:
+  check-deny:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: run deny docker compose
+        run: docker-compose run --rm deny
+
+
+
diff --git a/buildkite.yml b/buildkite.yml
index 6946e37..b41d1bb 100644
--- a/buildkite.yml
+++ b/buildkite.yml
@@ -11,10 +11,6 @@ steps:
     plugins:
        - docker-compose#v3.0.3:
           run: check-readme
-  - label: "check deny"
-    plugins:
-       - docker-compose#v3.0.3:
-           run: deny
   - label: "example: execute hello world"
     commands: 
       - cd examples/examples/src/hello_world
diff --git a/docker-compose.yml b/docker-compose.yml
index bdf6f7a..f458436 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -27,7 +27,7 @@ services:
     working_dir: /cerk
     command: ./check-readme.sh
   deny:
-    image: lazzaretti/docker-rust-cerk:0.7.0
+    image: ghcr.io/ce-rust/rust-cerk:v8.1.0
     volumes:
       - .:/cerk/
     working_dir: /cerk