diff --git a/.github/workflows/changelog.yaml b/.github/workflows/changelog.yml
similarity index 71%
rename from .github/workflows/changelog.yaml
rename to .github/workflows/changelog.yml
index 3e48a53..3e88b85 100644
--- a/.github/workflows/changelog.yaml
+++ b/.github/workflows/changelog.yml
@@ -1,14 +1,13 @@
 name: changelog
 permissions: write-all
-
 on:
   push:
     tags:
       - "*"
-  # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 jobs:
   call-workflow-changelog:
     uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@master
+    secrets: inherit
     with:
-      branch: 'master'
+      branch: 'master'
\ No newline at end of file
diff --git a/.github/workflows/tfsec.yml b/.github/workflows/tfsec.yml
new file mode 100644
index 0000000..9aaf588
--- /dev/null
+++ b/.github/workflows/tfsec.yml
@@ -0,0 +1,11 @@
+name: tfsec
+permissions: write-all
+on:
+  pull_request:
+  workflow_dispatch:
+jobs:
+  tfsec:
+    uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@master
+    secrets: inherit
+    with:
+      working_directory: '.'
\ No newline at end of file