diff --git a/owasp-zap-scan.yml b/owasp-zap-scan.yml
new file mode 100644
index 000000000..9338885fe
--- /dev/null
+++ b/owasp-zap-scan.yml
@@ -0,0 +1,5 @@
+steps:
+  - name: OWASP ZAP Scan
+    uses: zaproxy/action-baseline@v0.4.0
+    with:
+      target: 'https://boards.wekan.team'