diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 12b4534..ba36430 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -78,3 +78,9 @@ jobs:
       - name: Stop network
         if: ${{ always() }}
         run: bash run.sh stop_network
+
+  scan:
+    if: github.event_name == 'pull_request'
+    uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
+    with:
+      allow-reciprocal-licenses: false