diff --git a/.github/workflows/secret-scanning.yaml b/.github/workflows/secret-scanning.yaml
new file mode 100644
index 0000000000000..c250773d20b73
--- /dev/null
+++ b/.github/workflows/secret-scanning.yaml
@@ -0,0 +1,24 @@
+name: 'Secret Scanning'
+
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+      - develop
+
+permissions: {}
+
+concurrency:
+  group: secret-scanning-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  secret-scan:
+    name: 'Scan for secrets'
+    uses: guiddeco/shared-workflows/.github/workflows/ci-secret-scanning.yaml@v1
+    permissions:
+      contents: read
+      pull-requests: write
+    with:
+      fail_on_findings: false