diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 000000000..88549dde8
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+yarn.lock -merge linguist-vendored
diff --git a/.github/workflows/lisan-al-gaib.yaml b/.github/workflows/lisan-al-gaib.yaml
new file mode 100644
index 000000000..af70665b1
--- /dev/null
+++ b/.github/workflows/lisan-al-gaib.yaml
@@ -0,0 +1,23 @@
+name: "Dependency Check"
+on:
+  push:
+    branches: [main]
+    paths:
+      - .github/workflows/lisan-al-gaib.yaml
+      - yarn.lock
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-slim
+    steps:
+      - uses: runloopai/checkout@main
+
+      - uses: runloopai/lisan-al-gaib-action@main
+        with:
+          ecosystems: npm,actions
+          bypass-keyword: cve-fix
+
diff --git a/.yarnrc.yml b/.yarnrc.yml
new file mode 100644
index 000000000..a73342180
--- /dev/null
+++ b/.yarnrc.yml
@@ -0,0 +1 @@
+npmMinimalAgeGate: "3d"