diff --git a/.github/workflows/nix-integration-test.yml b/.github/workflows/nix-integration-test.yml
index 0191203..3d760ae 100644
--- a/.github/workflows/nix-integration-test.yml
+++ b/.github/workflows/nix-integration-test.yml
@@ -3,7 +3,9 @@ name: nix-integration-test
 on:
   pull_request:
   push:
-    branches: [master]
+    branches:
+      - master
+      - update_flake_lock_action
 
 jobs:
   lints:
diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml
new file mode 100644
index 0000000..391ad89
--- /dev/null
+++ b/.github/workflows/update-flake-lock.yml
@@ -0,0 +1,16 @@
+name: update-flake-lock
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 17 1 * *'
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+          ssh-key: ${{ secrets.UPDATE_FLAKE_LOCK_SSH_KEY }}
+      - uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # v12
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@bba6a453b747fa3bd82895a4a296c3d0e3cfabd4 # v22