diff --git a/.github/workflows/zap.yml b/.github/workflows/zap.yml
new file mode 100644
index 0000000..cc8e73c
--- /dev/null
+++ b/.github/workflows/zap.yml
@@ -0,0 +1,13 @@
+name: ZAP Scan
+
+on: [push]
+
+jobs:
+  zap_scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: ZAP Scan
+        uses: zaproxy/action-full-scan@v0.9.0
+        with:
+          target: "https://www.zaproxy.org/"