diff --git a/.github/workflows/contributor-trust.yml b/.github/workflows/contributor-trust.yml
new file mode 100644
index 0000000..005ecc1
--- /dev/null
+++ b/.github/workflows/contributor-trust.yml
@@ -0,0 +1,38 @@
+name: Contributor Trust Report
+
+on:
+  pull_request_target:
+    types: [opened, reopened, synchronize, ready_for_review]
+  issues:
+    types: [opened]
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+  models: read
+
+concurrency:
+  group: contributor-trust-${{ github.event.pull_request.number || github.event.issue.number || github.run_id }}-${{ github.actor }}
+  cancel-in-progress: true
+
+jobs:
+  report:
+    name: Inspect public contributor signals
+    if: github.actor != 'github-actions[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Build contributor trust report
+        id: trust
+        uses: Neroxsh/contributor-trust-action@v1
+        with:
+          github-token: ${{ github.token }}
+
+      - name: Record result
+        env:
+          AUTHOR: ${{ steps.trust.outputs.author }}
+          RISK_LEVEL: ${{ steps.trust.outputs['risk-level'] }}
+          RISK_SCORE: ${{ steps.trust.outputs['risk-score'] }}
+        run: echo "@${AUTHOR} => ${RISK_LEVEL} (${RISK_SCORE}/100)"