diff --git a/.gitea/workflows/testing.yaml b/.gitea/workflows/testing.yaml
new file mode 100644
index 0000000..e3843c8
--- /dev/null
+++ b/.gitea/workflows/testing.yaml
@@ -0,0 +1,14 @@
+name: "test"
+on: push #runs on pushes to any branch
+
+jobs:
+  test:
+    runs-on: smoke-test
+    steps:
+    - name: "dependency and stdlib scan"
+      uses: golang/govulncheck-action@v1.0.4
+    
+    - name: "static code analysis"
+      uses: securego/gosec@v2.22.3
+      with:
+        args: ./...
\ No newline at end of file