diff --git a/.chezmoiscripts/run_once_add-ssh-pk.sh b/.chezmoiscripts/run_once_add-ssh-pk.sh
new file mode 100644
index 0000000..ccde9ff
--- /dev/null
+++ b/.chezmoiscripts/run_once_add-ssh-pk.sh
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+set -eu
+
+ID_RSA_FILENAME=$HOME/.ssh/id_rsa
+
+echo "$GH_ID_RSA" > $ID_RSA_FILENAME
+chmod 600 $ID_RSA_FILENAME