diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
new file mode 100644
index 0000000..596369b
--- /dev/null
+++ b/.github/workflows/security.yaml
@@ -0,0 +1,10 @@
+name: Security Testing
+
+on:
+  pull_request:
+    types: [ opened, synchronize ]
+
+jobs:
+  sast:
+    uses: p2p-org/security-workflows/.github/workflows/sast.yaml@main
+    secrets: inherit