diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c3e16739..dff7b0af 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,6 +24,21 @@ jobs:
       - name: Scan for known security vulnerabilities in gems used
         run: bin/bundler-audit
 
+  scan_js:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: .node-version
+
+      - name: Scan for known security vulnerabilities in npm packages
+        run: npm audit --audit-level=high
+
   lint:
     runs-on: ubuntu-latest
     env: