diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..e953265
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,23 @@
+name: Nix build
+
+on:
+  [push, pull_request]
+
+jobs:
+  flake-default:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+    - uses: cachix/install-nix-action@v20
+      with:
+        nix_path: nixpkgs=channel:nixos-unstable
+        github_access_token: ${{ secrets.GITHUB_TOKEN }}
+    - uses: cachix/cachix-action@v12
+      with:
+        name: nix-community
+        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+    - uses: actions/checkout@v3
+    - name: Nix build
+      run: nix-build --show-trace
diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index 51dd129..0000000
--- a/.travis.yml
+++ /dev/null
@@ -1,2 +0,0 @@
-language: nix
-script: nix-build --show-trace
diff --git a/default.nix b/default.nix
index 428e93a..66244ef 100644
--- a/default.nix
+++ b/default.nix
@@ -5,7 +5,7 @@
 
 # uses build in upstream nixpkgs
 (pkgs.callPackage "${nixpkgs}/pkgs/tools/security/vulnix" {
-  python3Packages = pkgs.python37Packages;
+  python3Packages = pkgs.python311Packages;
 }).overrideAttrs (
   old: rec {
     src = lib.cleanSource ./.;