diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
new file mode 100644
index 0000000..227a752
--- /dev/null
+++ b/.github/workflows/codecov.yml
@@ -0,0 +1,40 @@
+name: Codecov workflow
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.*'
+      - '.github/**'
+      - 'codecov.yml'
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.*'
+      - '.github/**'
+      - 'codecov.yml'
+env:
+  HIBP_API_KEY: ${{ secrets.HIBP_API_KEY }}
+jobs:
+  run:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        go: [1.15, 1.16, 1.17, 1.18]
+    steps:
+    - name: Checkout Code
+      uses: actions/checkout@master
+
+    - name: Run Tests
+      run: |
+        go test -v -race --coverprofile=coverage.coverprofile --covermode=atomic .
+    
+    - name: Upload coverage to Codecov
+      if: success() && matrix.go == 1.18 && matrix.os == 'ubuntu-latest'
+      uses: codecov/codecov-action@v2
+      with:
+        token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos