diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 94f28a93..52b4edd6 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -56,3 +56,15 @@ jobs:
       - run: cd frontend && lhci autorun --collect.psiStrategy=desktop --upload.target=temporary-public-storage
     env:
       LHCI_GITHUB_APP_TOKEN: ${{ secrets.LIGHTHOUSE_CI }}
+
+  scan:
+    name: gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}