diff --git a/.github/workflows/ws_scan.yaml b/.github/workflows/ws_scan.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..b830ef4b0bf2a10f8ef6ba26eed12aba47cb5e39
--- /dev/null
+++ b/.github/workflows/ws_scan.yaml
@@ -0,0 +1,16 @@
+
+on:
+  push:
+    branches: [master]
+
+jobs:
+  WS_SCAN:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Download UA
+        run: curl -LJO https://github.com/whitesource/unified-agent-distribution/releases/latest/download/wss-unified-agent.jar
+
+      - name: Run UA scan
+        run: java -jar wss-unified-agent.jar -d $GITHUB_WORKSPACE -noConfig true -apiKey ${{ secrets.WS_ORG_TOKEN }} -product W4D -project "Renovate OS - master" -resolveAllDependencies false -npm_resolveDependencies true