diff --git a/.eslintignore b/.eslintignore
index 1b4d23c69..06fe9846a 100644
--- a/.eslintignore
+++ b/.eslintignore
@@ -4,6 +4,9 @@ coverage/**
 dist/**
 release/**
 
+# Github workflows
+.github/**
+
 # Generated files
 js/curve/*
 js/components.js
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
new file mode 100644
index 000000000..8543b9321
--- /dev/null
+++ b/.github/workflows/backport.yml
@@ -0,0 +1,29 @@
+
+# Copyright 2021 Signal Messenger, LLC
+# SPDX-License-Identifier: AGPL-3.0-only
+
+name: Backport
+on:
+  issue_comment:
+    types: [created]
+  pull_request:
+    types: [closed]
+
+jobs:
+  backport:
+    name: Apply labels and open backport pull requests
+    if: ${{ github.repository == 'signalapp/Signal-Desktop-Private' }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          token: ${{ secrets.AUTOMATED_GITHUB_PAT }}
+          repository: signalapp/Signal-Backport-Action-Private
+          path: ./.github/actions/backport
+      - name: Run action
+        uses: ./.github/actions/backport
+        with:
+          token: ${{ secrets.AUTOMATED_GITHUB_PAT }}
+          git-email: backport-bot@signal.org
+          git-name: Backport Bot
diff --git a/.prettierignore b/.prettierignore
index edef5961a..022ebc4f7 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -30,6 +30,9 @@ test/blanket_mocha.js
 # Test fixtures
 test/fixtures.js
 
+# Github workflows
+.github/**
+
 # Managed by Transifex:
 # Note: the negate pattern only works because it's targeting the same depth as the
 #   glob on the previous line.
diff --git a/ts/util/lint/linter.ts b/ts/util/lint/linter.ts
index 9b4a05d68..daac1f635 100644
--- a/ts/util/lint/linter.ts
+++ b/ts/util/lint/linter.ts
@@ -64,6 +64,9 @@ const excludedFilesRegexps = [
   '^libtextsecure/test/.+',
   '^test/.+',
 
+  // Github workflows
+  '^.github/.+',
+
   // Modules we trust
   '^node_modules/core-js-pure/.+',
   '^node_modules/core-js/.+',