diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index 559591bf7489..3a769eaf9bfb 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -106,6 +106,9 @@ jobs:
         vendor/bin/phpunit --testdox
       env:
         DB_PORT: ${{ job.services.mysql.ports[3306] }}
+    
+    - name: HCL AppScan CodeSweep
+      uses: HCL-TECH-SOFTWARE/appscan-codesweep-action@v1
 
     - name: Run php-cs-fixer
       run: |