diff --git a/.github/workflows/semgrep_diff.yml b/.github/workflows/semgrep_diff.yml
new file mode 100644
index 000000000..cb5f22881
--- /dev/null
+++ b/.github/workflows/semgrep_diff.yml
@@ -0,0 +1,8 @@
+---
+name: Semgrep Differential Scan
+on:
+  pull_request:
+
+jobs:
+  semgrep-diff:
+    uses: adoptium/.github/.github/workflows/semgrep_diff.yml@main
diff --git a/.semgrepignore b/.semgrepignore
new file mode 100644
index 000000000..8b1378917
--- /dev/null
+++ b/.semgrepignore
@@ -0,0 +1 @@
+