diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
new file mode 100644
index 000000000..703d8ce73
--- /dev/null
+++ b/.github/workflows/main.yml
@@ -0,0 +1,41 @@
+name: CI
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        group: [cfi-tests, downstream-ontology, downstream-units, downstream-security-demo]
+        jdk: [jdk8, jdk11]
+    env:
+      GROUP: ${{matrix.group}}
+      JDKVER: ${{matrix.jdk}}
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up Python 3
+        uses: actions/setup-python@v2
+        with:
+          python-version: 3.6
+      - name: Checker Framework Inference Build & Test
+        run: |
+          python -c "import fcntl; fcntl.fcntl(1, fcntl.F_SETFL, 0)"
+          REMOTE_ORIGIN_URL=`git config --get remote.origin.url`
+          echo "THIS_REPO=${THIS_REPO}"
+          echo "JDKVER=${JDKVER}"
+          echo "GROUP=${GROUP}"
+          echo "BUILDJDK=${BUILDJDK}"
+          echo "REMOTE_ORIGIN_URL=${REMOTE_ORIGIN_URL}"
+          echo "GITHUB_REPOSITORY=${GITHUB_REPOSITORY}"
+          echo "GITHUB_REF=${GITHUB_REF}"
+          echo "GITHUB_EVENT_NAME=${GITHUB_EVENT_NAME}"
+          echo "GITHUB_COMMIT=${GITHUB_SHA}"
+
diff --git a/build.gradle b/build.gradle
index e1dc1a368..b357f290a 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,5 +1,5 @@
 plugins {
-    id 'com.github.johnrengelman.shadow' version '6.0.0'
+    id 'com.github.johnrengelman.shadow' version '6.1.0'
 }
 
 apply plugin: 'java'
@@ -50,20 +50,20 @@ dependencies {
     compile files("${checkerJar}")
     compile group: 'com.google.errorprone', name: 'javac', version: "$errorproneJavacVersion"
 
-    compile 'org.plumelib:options:1.0.4'
+    compile 'org.plumelib:options:1.0.5'
     // Serialize constraints
     compile 'com.googlecode.json-simple:json-simple:1.1.1'
     // Pretty print serialized constraints
     compile 'com.google.code.gson:gson:2.8.6'
 
-    compile 'org.ow2.sat4j:org.ow2.sat4j.core:2.3.5'
-    compile 'org.ow2.sat4j:org.ow2.sat4j.maxsat:2.3.5'
+    compile 'org.ow2.sat4j:org.ow2.sat4j.core:2.3.6'
+    compile 'org.ow2.sat4j:org.ow2.sat4j.maxsat:2.3.6'
     compile files(z3Jar)
 
     testCompile fileTree(dir: "${checkerFrameworkPath}/framework-test/build/libs", include: "framework-test-*.jar")
     // Mocking library. Used in a couple tests
     testCompile 'org.mockito:mockito-all:2.0.2-beta'
-    testCompile 'junit:junit:4.13'
+    testCompile 'junit:junit:4.13.1'
 }
 
 sourceSets {