diff --git a/.github/workflows/repo-compliance-scan.yml b/.github/workflows/repo-compliance-scan.yml
new file mode 100644
index 0000000..41aabb4
--- /dev/null
+++ b/.github/workflows/repo-compliance-scan.yml
@@ -0,0 +1,13 @@
+name: Infosec Compliance
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [ $default-branch ]
+
+jobs:
+  scan:
+    name: Code scan
+    uses: plume-design-inc/infosec-appsec/.github/workflows/compliance-scan.yml@main
+    secrets:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}