diff --git a/.forgejo/workflows/default-ci.yaml b/.forgejo/workflows/default-ci.yaml
new file mode 100644
index 0000000..6c85152
--- /dev/null
+++ b/.forgejo/workflows/default-ci.yaml
@@ -0,0 +1,28 @@
+name: CI
+
+on: [push]
+
+jobs:
+  secrets-scan:
+    name: TruffleHog Secrets Scan
+    runs-on: docker
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: trufflehog-actions-scan
+        uses: https://github.com/edplato/trufflehog-actions-scan@master
+
+  terraform:
+    name: Terraform Format & Validate
+    runs-on: docker
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - uses: https://github.com/hashicorp/setup-terraform@v3
+        with:
+          terraform_version: "1.5.7"
+
+      - name: Format Terraform Code
+        run: terraform fmt -recursive -check
\ No newline at end of file
diff --git a/.terraform-version b/.terraform-version
new file mode 100644
index 0000000..54d06cb
--- /dev/null
+++ b/.terraform-version
@@ -0,0 +1 @@
+v1.5.7
\ No newline at end of file