diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
new file mode 100644
index 00000000000..3c5b7629cfb
--- /dev/null
+++ b/.github/workflows/security-scan.yml
@@ -0,0 +1,12 @@
+name: Security Scan
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+
+jobs:
+  gitleaks:
+    uses: finbox-in/infosecops/.github/workflows/gitleaks.yml@main