diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
new file mode 100644
index 00000000000..b9edb322118
--- /dev/null
+++ b/.github/workflows/osv-scanner.yml
@@ -0,0 +1,15 @@
+name: OSV-Scanner
+
+# Default branch is "develop"
+on:
+  pull_request:
+  push:
+    branches: [ develop ]
+  merge_group:
+
+# Declaring default permissions as read only.
+permissions: read-all
+
+jobs:
+  scan-pr:
+    uses: "google/osv-scanner/.github/workflows/osv-scanner-reusable-pr.yml@12331be44c5c3d32b59eb006e8613bc53c3317a5"