diff --git a/.forgejo/workflows/molecule.yml b/.forgejo/workflows/molecule.yml
new file mode 100644
index 0000000..59dc096
--- /dev/null
+++ b/.forgejo/workflows/molecule.yml
@@ -0,0 +1,18 @@
+---
+on: [push]
+jobs:
+  lint:
+    runs-on: docker
+    container:
+      image: code.waks.be/nishiki/molecule:docker
+    steps:
+      - uses: actions/checkout@v3
+      - run: ansible-lint .
+      - run: yamllint .
+  molecule:
+    runs-on: docker
+    container:
+      image: code.waks.be/nishiki/molecule:docker
+    steps:
+      - uses: actions/checkout@v3
+      - run: molecule test
diff --git a/README.md b/README.md
index 29bdd00..31c4d23 100644
--- a/README.md
+++ b/README.md
@@ -2,6 +2,7 @@
 
 [![Version](https://img.shields.io/badge/latest_version-1.3.0-green.svg)](https://code.waks.be/nishiki/ansible-role-bind/releases)
 [![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](https://code.waks.be/nishiki/ansible-role-bind/src/branch/main/LICENSE)
+[![Build](https://code.waks.be/nishiki/ansible-role-bind/actions/workflows/molecule.yml/badge.svg?branch=main)](https://code.waks.be/nishiki/ansible-role-bind/actions?workflow=molecule.yml)
 
 Install and configure bind with dnssec