diff --git a/.github/sync.yml b/.github/sync.yml
index b03b361e..2eaf9027 100644
--- a/.github/sync.yml
+++ b/.github/sync.yml
@@ -32,6 +32,9 @@ group:
       # lock issues
       - source: .github/workflows/lock.yml
         dest: .github/workflows/lock.yml
+      # CLA check
+      - source: .github/workflows/cla.yml
+        dest: .github/workflows/cla.yml
       # epic issue form
       - source: .github/ISSUE_TEMPLATE/epic.yml
         dest: .github/ISSUE_TEMPLATE/epic.yml
diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
new file mode 100644
index 00000000..4436048b
--- /dev/null
+++ b/.github/workflows/cla.yml
@@ -0,0 +1,31 @@
+name: CLA
+
+on:
+  issue_comment:
+    types:
+      - created
+  pull_request_target:
+    types:
+      - reopened
+      - opened
+      - synchronize
+
+jobs:
+  check:
+    if: >-
+      !github.event.repository.fork
+      && (
+        github.event.comment.body == '@conda-bot check'
+        || github.event_name == 'pull_request_target'
+      )
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check CLA
+        uses: conda/actions/check-cla@v22.5.0
+        with:
+          # [required]
+          # label to add when actor has signed the CLA
+          label: cla-signed
+          # [required]
+          # the GitHub Personal Access Token to comment and label with
+          token: "${{ secrets.CLA_ACTION_TOKEN }}"