diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 00000000..076a3901
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,18 @@
+name: Semgrep
+on:
+ pull_request:
+ workflow_dispatch:
+
+jobs:
+ semgrep:
+ name: Run Semgrep
+ runs-on: ubuntu-latest
+ timeout-minutes: 30
+ container:
+ # A Docker image with Semgrep installed. Do not change this.
+ image: returntocorp/semgrep
+ steps:
+ - uses: actions/checkout@v4
+ - run: semgrep ci
+ env:
+ SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN_PUBLIC }}
diff --git a/README.md b/README.md
index 2f81e9e1..5e66f5b6 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,7 @@
+Update June 19, 2023: Stitches is no longer actively maintained due to changes in the React ecosystem and maintainer availability. You can read more here.
+
+---
+