diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
new file mode 100644
index 0000000..ee66f52
--- /dev/null
+++ b/.github/workflows/security.yml
@@ -0,0 +1,12 @@
+on: [push, pull_request]
+name: Security
+jobs:
+  Gosec:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fetch Repository
+        uses: actions/checkout@v2
+      - name: Run Gosec
+        uses: securego/gosec@master
+        with:
+          args: -exclude-dir=internal/*/ ./...