diff --git a/.ci/runChecks.sh b/.ci/runChecks.sh
index ea931d86a..3192c5be4 100755
--- a/.ci/runChecks.sh
+++ b/.ci/runChecks.sh
@@ -6,4 +6,4 @@ npm run lint:eslint
 npm run lint:prettier
 npm run --workspaces cdep
 npx --workspaces license-check
-npx better-npm-audit audit --exclude 1112030,1124298
+npx better-npm-audit audit
diff --git a/.github/workflows/dependency-security-maintenance.yml b/.github/workflows/dependency-security-maintenance.yml
new file mode 100644
index 000000000..f8b431928
--- /dev/null
+++ b/.github/workflows/dependency-security-maintenance.yml
@@ -0,0 +1,14 @@
+name: Dependency Security Maintenance
+
+on:
+  schedule:
+    - cron: "0 2 * * 2" # every Tuesday at 02:00 UTC
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  npm-audit:
+    uses: js-soft/github-actions/.github/workflows/dependency-security-maintenance.yml@main
+    secrets:
+      github-token: ${{ secrets.GH_PAT }}
diff --git a/.nsprc b/.nsprc
new file mode 100644
index 000000000..905456536
--- /dev/null
+++ b/.nsprc
@@ -0,0 +1,4 @@
+{
+    "1112030": {},
+    "1124298": {}
+}