diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
index 8ec209b..e91e76d 100644
--- a/.github/workflows/analysis.yml
+++ b/.github/workflows/analysis.yml
@@ -9,6 +9,10 @@ on:
     - cron: "0 11 * * 0" # 3 AM PST = 12 PM UDT, runs sundays
   workflow_dispatch:
 
+permissions: # used for commitlint
+  contents: read
+  pull-requests: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -80,6 +84,14 @@ jobs:
         with:
           sarif_file: "trivy-results.sarif"
 
+  commitlint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: wagoid/commitlint-github-action@v6
+        with:
+          configFile: '.commitlintrc.yml'
+
   results:
     name: Analysis Results
     needs: [tests] # Restore trivy when/if fixed