diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 000000000..b76b36e4c
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,11 @@
+name: semgrep
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+
+jobs:
+  semgrep:
+    uses: bavix/.github/.github/workflows/php-semgrep.yml@0.0.7