diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 0000000..aca0ab8
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,9 @@
+name: Security analysis with Semgrep
+on:
+  workflow_dispatch: {}
+  pull_request: {}
+jobs:
+  call-workflow-passing-data:
+    uses: tripactions/ta-seceng-automation/.github/workflows/reusable.yml@main
+    secrets:
+      SEMGREP_REUSABLE_TOKEN: ${{ secrets.SEMGREP_ORG_APP_TOKEN }}