diff --git a/.woodpecker/vulnerability-scan.yml b/.woodpecker/vulnerability-scan.yml
new file mode 100644
index 0000000..1cfb938
--- /dev/null
+++ b/.woodpecker/vulnerability-scan.yml
@@ -0,0 +1,5 @@
+when:
+  branch: main
+pipeline:
+  scan_vuln:
+    image: woodpeckerci/plugin-trivy
\ No newline at end of file