diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3016d72..3a11bf2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,4 +24,7 @@ jobs:
 
       - run: npm run build
 
+      - name: Verify committed Action bundle is current
+        run: git diff --exit-code -- dist
+
       - run: npm test
diff --git a/test/workflow.test.mjs b/test/workflow.test.mjs
index 4670761..048ab5f 100644
--- a/test/workflow.test.mjs
+++ b/test/workflow.test.mjs
@@ -78,6 +78,7 @@ test('CI workflow builds and tests PolicyMesh', async () => {
 
   assert.match(workflow, /npm ci/);
   assert.match(workflow, /npm run build/);
+  assert.match(workflow, /git diff --exit-code -- dist/);
   assert.match(workflow, /npm test/);
 });