diff --git a/.github/workflows/vuln-remediation.yml b/.github/workflows/vuln-remediation.yml
new file mode 100644
index 00000000..f382dbcb
--- /dev/null
+++ b/.github/workflows/vuln-remediation.yml
@@ -0,0 +1,17 @@
+name: Vulnerability Remediation
+
+on:
+  schedule:
+    - cron: '0 3 * * 3'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  remediate:
+    uses: kernel/security-workflows/.github/workflows/vuln-remediation.yml@main
+    with:
+      go-version-file: 'server/go.mod'
+    secrets: inherit
diff --git a/socket.yml b/socket.yml
new file mode 100644
index 00000000..d393f0b8
--- /dev/null
+++ b/socket.yml
@@ -0,0 +1,4 @@
+version: 2
+projectIgnorePaths:
+  - "shared/cdp-test/"
+  - "images/chromium-headful/client/"