diff --git a/.github/workflows/shiftleft.yml b/.github/workflows/shiftleft.yml
new file mode 100644
index 0000000..5523471
--- /dev/null
+++ b/.github/workflows/shiftleft.yml
@@ -0,0 +1,9 @@
+source:
+  branch: master
+  scan: previous
+build_rules:
+  - id: build-rule-identifier
+    finding_types:
+    type:
+      - Sensitive Data Leak
+    threshold: 20