diff --git a/.github/workflows/aisle-jit-scan.yml b/.github/workflows/aisle-jit-scan.yml
new file mode 100644
index 0000000..510f257
--- /dev/null
+++ b/.github/workflows/aisle-jit-scan.yml
@@ -0,0 +1,31 @@
+name: Aisle JIT security scan
+
+on:
+  pull_request:
+    branches: [master]
+    types: [closed]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: aisle-jit-scan-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  aisle-scan:
+    name: Aisle security scan
+    runs-on: pb-2c-4g
+    timeout-minutes: 15
+    if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: productboard/shared-workflows/.github/actions/jit-scan@6e034ce790a4d426755d32c111ca5d6ffbe0bd5f # main
+        with:
+          api_token: ${{ secrets.AISLE_API_TOKEN }}
+          api_url: ${{ secrets.AISLE_API_URL }}
+          scan_types: sast,licenses
+          fail_on_findings: false