diff --git a/roles/github-auth/tasks/main.yaml b/roles/github-auth/tasks/main.yaml
new file mode 100644
index 0000000..039285f
--- /dev/null
+++ b/roles/github-auth/tasks/main.yaml
@@ -0,0 +1,6 @@
+---
+- name: app ssh pubkey to github account
+  github_key:
+      name: Added by ansible
+      token: "{{ lookup('env', 'GITHUB_ACCESS_TOKEN') }}"
+      pubkey: "{{ account.ssh_public_key }}"
diff --git a/wsl-debian.yaml b/wsl-debian.yaml
index 2a1c427..ac8edad 100644
--- a/wsl-debian.yaml
+++ b/wsl-debian.yaml
@@ -8,6 +8,7 @@
   roles:
     - update-packages
     - user-account
+    - github-auth
     - misc
     - oh-my-zsh
     - neovim