diff --git a/.github/workflows/deploy-to-gae.yaml b/.github/workflows/deploy-to-gae.yaml
new file mode 100644
index 0000000..cc480c4
--- /dev/null
+++ b/.github/workflows/deploy-to-gae.yaml
@@ -0,0 +1,19 @@
+name: Deploy to GAE
+on:
+  push:
+    branches:
+    - master
+permissions:
+  contents: 'read'
+  id-token: 'write'
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+    - id: 'auth'
+      uses: 'google-github-actions/auth@v1'
+      with:
+        workload_identity_provider: 'projects/769700566231/locations/global/workloadIdentityPools/gh-actions-pool/providers/github'
+        service_account: 'github-deploy@fhir-org-cds-services.iam.gserviceaccount.com'
+    - id: 'deploy'
+      uses: 'google-github-actions/deploy-appengine@v1'