diff --git a/.github/workflows/osv-scanner-full.yml b/.github/workflows/osv-scanner-full.yml
new file mode 100644
index 0000000..cd665ee
--- /dev/null
+++ b/.github/workflows/osv-scanner-full.yml
@@ -0,0 +1,21 @@
+name: OSV-Scanner Full Scan
+
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '23 9 * * 0'
+  workflow_dispatch:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  scan-full:
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0
+    with:
+      # Initial rollout reports vulnerabilities without failing the scan.
+      fail-on-vuln: false
+      upload-sarif: true
diff --git a/.github/workflows/osv-scanner-pr.yml b/.github/workflows/osv-scanner-pr.yml
new file mode 100644
index 0000000..86c35a3
--- /dev/null
+++ b/.github/workflows/osv-scanner-pr.yml
@@ -0,0 +1,21 @@
+name: OSV-Scanner PR Scan
+
+on:
+  pull_request:
+    branches: [main]
+  merge_group:
+    branches: [main]
+    types: [checks_requested]
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  scan-pr:
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0
+    with:
+      # Initial rollout reports vulnerabilities without blocking merges.
+      fail-on-vuln: false
+      upload-sarif: true