diff --git a/.github/workflows/tailscale.yml b/.github/workflows/tailscale.yml
index 4b93970..a818247 100644
--- a/.github/workflows/tailscale.yml
+++ b/.github/workflows/tailscale.yml
@@ -30,3 +30,8 @@ jobs:
         shell: bash
         run:
           tailscale status -json | jq -r .BackendState | grep -q Running
+
+      - name: ensure no dirty files remain
+        shell: bash
+        run:
+          test -z "$(git status --porcelain)"