diff --git a/.github/workflows/secret_scanning.yml b/.github/workflows/secret_scanning.yml
new file mode 100644
index 0000000..79d8e21
--- /dev/null
+++ b/.github/workflows/secret_scanning.yml
@@ -0,0 +1,10 @@
+name: "Secret Scanning"
+on:
+  pull_request:
+
+jobs:
+  check_commits:
+    uses: trufflesecurity/trufflehog@main
+    with:
+      extra_args: --results=verified,unknown
+