diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 000000000..fb7fa1706
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.lock -merge linguist-vendored
diff --git a/.github/workflows/lisan-al-gaib.yaml b/.github/workflows/lisan-al-gaib.yaml
new file mode 100644
index 000000000..19f50c56c
--- /dev/null
+++ b/.github/workflows/lisan-al-gaib.yaml
@@ -0,0 +1,28 @@
+name: "Dependency Check"
+on:
+  push:
+    branches: [main]
+    paths:
+      - .github/workflows/lisan-al-gaib.yaml
+      - '*.lock'
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-slim
+    steps:
+      - uses: runloopai/checkout@main
+
+      - uses: runloopai/lisan-al-gaib-action@main
+        with:
+          ecosystems: python,actions
+          bypass-keyword: cve-fix
+          python-lockfiles: '*.lock'
+          license-overrides: |
+            python:
+              apeye: ignore     # Only used by sphinx-toolbox for docs generation
+              cssutils: ignore  # Only used by sphinx-toolbox for docs generation
+
diff --git a/pyproject.toml b/pyproject.toml
index 64ca9ee03..4c0d9da8e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -46,6 +46,7 @@ Documentation = "https://runloopai.github.io/api-client-python/"
 aiohttp = ["aiohttp", "httpx_aiohttp>=0.1.9"]
 
 [tool.uv]
+exclude-newer = "14 days"
 managed = true
 required-version = ">=0.9"