diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
new file mode 100644
index 00000000..d2e7b44d
--- /dev/null
+++ b/.github/workflows/stale.yaml
@@ -0,0 +1,26 @@
+name: 'Close stale issues and PRs'
+on:
+  schedule:
+    - cron: '0 10 * * *'
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@v3
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          days-before-stale: 60
+          days-before-close: 7
+          stale-issue-label: stale
+          stale-pr-label: stale
+          exempt-pr-labels: security,pinned
+          exempt-issue-labels: security,pinned
+          stale-issue-message: |
+            This issue is stale because it has been open 60 days with no activity.
+            Remove `stale` label or comment or this will be closed in 7 days.
+            If you don't want this issue to be closed, please set the label `pinned`.
+          stale-pr-message: |
+            This pull request is stale because it has been open 60 days with no activity.
+            Remove `stale` label or comment or this will be closed in 7 days.
+            If you don't want this pull request to be closed, please set the label `pinned`.