diff --git a/justfile b/justfile
index 36b27c7e439e..c27d44904cd9 100644
--- a/justfile
+++ b/justfile
@@ -1,6 +1,9 @@
 issues:
   ./ops/scripts/todo-checker.sh
 
+semgrep-scan-local:
+  semgrep scan --config=.semgrep
+
 lint-shellcheck:
   find . -type f -name '*.sh' -not -path '*/node_modules/*' -not -path './packages/contracts-bedrock/lib/*' -not -path './packages/contracts-bedrock/kout*/*' -exec sh -c 'echo \"Checking $1\"; shellcheck \"$1\"' _ {} \\;