diff --git a/v1/workflows b/v1/workflows
new file mode 100644
index 0000000..93b4c3a
--- /dev/null
+++ b/v1/workflows
@@ -0,0 +1,28 @@
+name: Security Headers Check
+
+on:
+  deployment_status:
+
+jobs:
+  check:
+    if: github.event.deployment_status.state == 'success'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check Security Headers
+        run: |
+          URL="${{ github.event.deployment_status.environment_url }}"
+          HEADERS=$(curl -sI "$URL")
+          echo "$HEADERS"
+          
+          # Check required headers
+          if echo "$HEADERS" | grep -qi "content-security-policy"; then
+            echo "✅ CSP header found"
+          else
+            echo "❌ Missing CSP header"
+          fi
+          
+          if echo "$HEADERS" | grep -qi "x-frame-options"; then
+            echo "✅ X-Frame-Options header found"
+          else
+            echo "❌ Missing X-Frame-Options header"
+          fi