diff --git a/.gitea/workflows/quality.yml b/.gitea/workflows/quality.yml
index d07bac2..56e5f4b 100644
--- a/.gitea/workflows/quality.yml
+++ b/.gitea/workflows/quality.yml
@@ -6,6 +6,16 @@ on:
   pull_request:
 
 jobs:
+  secret-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Secret scan
+        uses: trufflesecurity/trufflehog@v3.79.0
+        with:
+          path: ./
+          extra_args: --only-verified
+
   quality:
     runs-on: windows-latest
     steps: