diff --git a/.bearer/bearer.ignore b/.bearer/bearer.ignore
new file mode 100644
index 000000000..0967ef424
--- /dev/null
+++ b/.bearer/bearer.ignore
@@ -0,0 +1 @@
+{}
diff --git a/.bearer/bearer.yml b/.bearer/bearer.yml
new file mode 100644
index 000000000..9be1546b4
--- /dev/null
+++ b/.bearer/bearer.yml
@@ -0,0 +1,7 @@
+# Repository-specific Bearer configuration.
+
+rule:
+  skip-rule: []
+
+scan:
+  skip-path: []
diff --git a/.github/workflows/bearer-full.yml b/.github/workflows/bearer-full.yml
new file mode 100644
index 000000000..fd7aec081
--- /dev/null
+++ b/.github/workflows/bearer-full.yml
@@ -0,0 +1,27 @@
+name: Bearer-CLI Full Scan
+
+on:
+  workflow_dispatch:
+    inputs:
+      minimum_severity:
+        description: Lowest severity to include in the scan.
+        required: true
+        type: choice
+        default: high
+        options:
+          - critical
+          - high
+          - medium
+          - low
+          - all
+
+permissions:
+  contents: read
+
+jobs:
+  run:
+    uses: docknetwork/engineering-toolkit/.github/workflows/bearer-full.yml@main
+    with:
+      minimum_severity: ${{ inputs.minimum_severity }}
+      toolkit_repository: docknetwork/engineering-toolkit
+      toolkit_ref: main
diff --git a/.github/workflows/bearer-pr.yml b/.github/workflows/bearer-pr.yml
new file mode 100644
index 000000000..6d8cdb3be
--- /dev/null
+++ b/.github/workflows/bearer-pr.yml
@@ -0,0 +1,20 @@
+name: Bearer-CLI
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  run:
+    uses: docknetwork/engineering-toolkit/.github/workflows/bearer-diff.yml@main
+    with:
+      minimum_severity: ${{ vars.BEARER_MIN_SEVERITY || 'high' }}
+      enforce: ${{ vars.BEARER_ENFORCE == 'true' }}
+      toolkit_repository: docknetwork/engineering-toolkit
+      toolkit_ref: main