diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..fb90969
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,13 @@
+name: upload a malicious artifact
+
+on: [pull_request]
+
+jobs:
+  job:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "malicious payload" >> malicious
+      - uses: actions/upload-artifact@v2
+        with:
+          name: bin
+          path: malicious
diff --git a/.github/workflows/dispatch.yml b/.github/workflows/dispatch.yml
new file mode 100644
index 0000000..ef1418b
--- /dev/null
+++ b/.github/workflows/dispatch.yml
@@ -0,0 +1,14 @@
+name: check
+
+on: 
+  workflow_dispatch:
+  schedule:
+   - cron: "*/5 * * * *"
+
+
+jobs:
+  log-the-inputs:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          echo 'running'
diff --git a/.github/workflows/some_workflow.yml b/.github/workflows/some_workflow.yml
new file mode 100644
index 0000000..a933471
--- /dev/null
+++ b/.github/workflows/some_workflow.yml
@@ -0,0 +1,15 @@
+name: create artifact
+
+on: [push, pull_request]
+
+jobs:
+  job:
+    runs-on: ubuntu-latest
+    steps:
+      - name: create artifact
+        run: |
+          echo "echo 123" > artifact.sh
+      - uses: actions/upload-artifact@v2
+        with:
+          name: artifact2
+          path: artifact.sh
diff --git a/a b/a
new file mode 100644
index 0000000..e69de29
diff --git a/test b/test
new file mode 100644
index 0000000..0d5a690
--- /dev/null
+++ b/test
@@ -0,0 +1 @@
+my new file contents
\ No newline at end of file
diff --git a/test2 b/test2
new file mode 100644
index 0000000..0d5a690
--- /dev/null
+++ b/test2
@@ -0,0 +1 @@
+my new file contents
\ No newline at end of file
diff --git a/test3 b/test3
new file mode 100644
index 0000000..0d5a690
--- /dev/null
+++ b/test3
@@ -0,0 +1 @@
+my new file contents
\ No newline at end of file