diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..21fdbed
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+# see https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
new file mode 100644
index 0000000..94b750d
--- /dev/null
+++ b/.github/workflows/tests.yml
@@ -0,0 +1,18 @@
+---
+name: Tests
+on:
+  push:
+  pull_request:
+    types: [opened]
+  schedule:
+    - cron: '16 19 24 * *'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: run tests
+      run: cd test && ./run-tests.sh
+    - name: shellcheck
+      uses: ludeeus/action-shellcheck@2.0.0
diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index cac819d..0000000
--- a/.travis.yml
+++ /dev/null
@@ -1,5 +0,0 @@
-language: minimal
-
-install: true
-
-script: shellcheck update-client && cd test && ./run-tests.sh
diff --git a/README.md b/README.md
index d087df2..0de6231 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 dns-update
 ==========
 
-[![Build Status](https://travis-ci.org/mmitch/dns-update.svg?branch=master)](https://travis-ci.org/mmitch/dns-update)
+[![Build status](https://github.com/mmitch/dns-update/workflows/Tests/badge.svg)](https://github.com/mmitch/dns-update/actions?query=workflow%3ATests)
 [![GPL 3+](https://img.shields.io/badge/license-GPL%203%2B-blue.svg)](http://www.gnu.org/licenses/gpl-3.0-standalone.html)
 
 * dns-update - small dynamic DNS suite using SSH
diff --git a/test/test-functions.sh b/test/test-functions.sh
index 34703d2..4a487c7 100644
--- a/test/test-functions.sh
+++ b/test/test-functions.sh
@@ -1,10 +1,12 @@
 #!/bin/bash
+# shellcheck disable=SC2317 # ignore because declared functions are invoked indirectly
 
 setup_test()
 {
     set -e
 
     TESTDIR=$(mktemp -d)
+    # shellcheck disable=SC2064 # yes, remember $TESTDIR as it is currently set
     trap "rm -r \"$TESTDIR\"" EXIT
 
     BINARY="$TESTDIR/update-client"