diff --git a/.github/workflows/get-roots.yaml b/.github/workflows/get-roots.yaml
new file mode 100644
index 00000000..ea0173ce
--- /dev/null
+++ b/.github/workflows/get-roots.yaml
@@ -0,0 +1,20 @@
+name: Check for Google Root CA Updates
+
+on:
+  schedule:
+    - cron: '23 23 * * *'
+
+jobs:
+  check-apis:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+        with:
+          persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
+          fetch-depth: 0 # otherwise, you will failed to push refs to dest repo
+
+      - name: pwd
+        run: pwd
+
+      - name: Check for updates
+        run: curl -o src/roots.pem https://pki.goog/roots.pem