diff --git a/.github/workflows/th-secret-scan.yml b/.github/workflows/th-secret-scan.yml
new file mode 100644
index 0000000..d371087
--- /dev/null
+++ b/.github/workflows/th-secret-scan.yml
@@ -0,0 +1,5 @@
+name: Leaked Secrets Scan
+on: [pull_request, push]
+jobs:
+  security:
+    uses: spring-media/ccq-utils/.github/workflows/security.yml@main