diff --git a/.github/workflows/publiccodeyml-check.yml b/.github/workflows/publiccodeyml-check.yml
new file mode 100644
index 0000000..c9695ac
--- /dev/null
+++ b/.github/workflows/publiccodeyml-check.yml
@@ -0,0 +1,27 @@
+name: Validate publiccode.yml
+
+on:
+  push:
+    paths:
+      - "publiccode.yml"
+      - ".github/workflows/publiccode.yml"
+  pull_request:
+    paths:
+      - "publiccode.yml"
+      - ".github/workflows/publiccode.yml"
+
+permissions: {}
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    name: publiccode.yml validation
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+
+      - uses: italia/publiccode-parser-action@56e1200cba853b1efa73ee871600284d0705ab4d # v1
+        with:
+          publiccode: "publiccode.yml"
+          no-network: true
diff --git a/publiccode.yml b/publiccode.yml
index f20975d..e7101e1 100644
--- a/publiccode.yml
+++ b/publiccode.yml
@@ -1,4 +1,4 @@
-publiccodeYmlVersion: 0.4.0
+publiccodeYmlVersion: '0'
 name: clixon-pyapi
 applicationSuite: Clixon
 url: https://github.com/clicon/clixon-pyapi
@@ -26,6 +26,9 @@ legal:
   license: Apache-2.0
 maintenance:
   type: community
+  contacts:
+    # TODO: add at least one contact (name plus email or affiliation)
+    - name: TODO
 localisation:
   localisationReady: false
   availableLanguages: