diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 54089e9..1b5adf9 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -14,6 +14,15 @@ jobs:
     - run: nix build .#doc
     - run: nix fmt . -- --check
     - run: nix flake check
+    - name: "Flake.lock health check"
+      shell: bash
+      run: |
+        (
+          set -eu
+          curl --max-time 2 --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/flake-checker/stable/$RUNNER_ARCH-$RUNNER_OS > "$RUNNER_TEMP/flake-checker"
+          chmod +x "$RUNNER_TEMP/flake-checker"
+          "$RUNNER_TEMP/flake-checker"
+        ) || true
   tests-darwin:
     runs-on: macos-11
     steps: