diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 063d0a0543b..bffd5f4f4ec 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -87,6 +87,28 @@ jobs:
       with: 
         fetch-depth: 0        
 
+    # - name: Print debug output
+    #   env:
+    #     GITHUB_CONTEXT: ${{ toJson(github) }}
+    #   run: |
+    #     echo
+
+    #     echo "$GITHUB_SHA"
+    #     echo "$GITHUB_REF"
+    #     echo "$GITHUB_HEAD_REF"
+    #     echo "$GITHUB_BASE_REF"
+    #     git log "$GITHUB_BASE_REF"..
+    #     bin/commitlint "$GITHUB_BASE_REF"..
+
+    - name: Check commit messages
+      env:
+        BEFORE: ${{ github.event.before }}
+      # for a PR this will be: origin/master..origin/$GITHUB_HEAD_REF
+      # for a push it will be: $BEFORE..
+      # for a force push, BEFORE is the previous HEAD, and on github (not locally) this is an "invalid revision range"
+      run: |
+        bin/commitlint ${BEFORE:-origin/master}..${GITHUB_HEAD_REF:+origin/$GITHUB_HEAD_REF}
+
     # things to be cached/restored:
 
     - name: Cache stack global package db
diff --git a/.github/workflows/mac.yml b/.github/workflows/mac.yml
index 29f25453503..bb491ee96fc 100644
--- a/.github/workflows/mac.yml
+++ b/.github/workflows/mac.yml
@@ -57,6 +57,15 @@ jobs:
       with: 
         fetch-depth: 0        
 
+    - name: Check commit messages
+      env:
+        BEFORE: ${{ github.event.before }}
+      # for a PR this will be: origin/master..origin/$GITHUB_HEAD_REF
+      # for a push it will be: $BEFORE..
+      # for a force push, BEFORE is the previous HEAD, and on github (not locally) this is an "invalid revision range"
+      run: |
+        bin/commitlint ${BEFORE:-origin/master}..${GITHUB_HEAD_REF:+origin/$GITHUB_HEAD_REF}
+
     # things to be cached/restored:
 
     - name: Cache stack global package db
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 50802f66432..40c42029dad 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -1,4 +1,5 @@
-# Runs on notable pushes to master.
+# Runs on (after) notable pushes to master.
+# Failure does not block the push.
 
 # Builds incrementally and runs functional tests on linux,
 # using the latest supported GHC version.
@@ -50,6 +51,28 @@ jobs:
       with: 
         fetch-depth: 0        
 
+    # - name: Print debug output
+    #   env:
+    #     GITHUB_CONTEXT: ${{ toJson(github) }}
+    #   run: |
+    #     echo
+
+    #     echo "$GITHUB_SHA"
+    #     echo "$GITHUB_REF"
+    #     echo "$GITHUB_HEAD_REF"
+    #     echo "$GITHUB_BASE_REF"
+    #     git log "$GITHUB_BASE_REF"..
+    #     bin/commitlint "$GITHUB_BASE_REF"..
+
+    - name: Check commit messages
+      env:
+        BEFORE: ${{ github.event.before }}
+      # for a PR this will be: master..origin/$GITHUB_HEAD_REF
+      # for a push it will be: $BEFORE..
+      # for a force push, BEFORE is the previous HEAD, and on github (not locally) this is an "invalid revision range"
+      run: |
+        bin/commitlint ${BEFORE:-origin/master}..${GITHUB_HEAD_REF:+origin/$GITHUB_HEAD_REF}
+
     # things to be cached/restored:
 
     - name: Cache stack global package db
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index fdbe7c2789c..ff4ecf40552 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -47,6 +47,15 @@ jobs:
       with: 
         fetch-depth: 0        
 
+    - name: Check commit messages
+      env:
+        BEFORE: ${{ github.event.before }}
+      # for a PR this will be: origin/master..origin/$GITHUB_HEAD_REF
+      # for a push it will be: $BEFORE..
+      # for a force push, BEFORE is the previous HEAD, and on github (not locally) this is an "invalid revision range"
+      run: |
+        bin/commitlint ${BEFORE:-origin/master}..${GITHUB_HEAD_REF:+origin/$GITHUB_HEAD_REF}
+
     # things to be cached/restored:
 
     - name: Cache stack global package db