diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ae6affee5..45f75e0c1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - "main"
+      - "support-fossa-scanning"
   workflow_dispatch:
     inputs:
       build-ref:
diff --git a/.release/ci.hcl b/.release/ci.hcl
index 74118631a..27d62cd7d 100644
--- a/.release/ci.hcl
+++ b/.release/ci.hcl
@@ -14,6 +14,7 @@ project "nomad" {
       "release/1.1.x",
       "release/1.2.x",
       "release/1.3.x",
+      "support-fossa-scanning",
     ]
   }
 }
@@ -150,6 +151,15 @@ event "verify" {
   }
 }
 
+event "fossa-scan" {
+  depends = ["verify"]
+  action "fossa-scan" {
+    organization = "hashicorp"
+    repository = "crt-workflows-common"
+    workflow = "fossa-scan"
+  }
+}
+
 ## These are promotion and post-publish events
 ## they should be added to the end of the file after the verify event stanza.