diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 239c27d2..b41fc00f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -41,6 +41,24 @@ repos:
     hooks:
       - id: hadolint
 
+  - repo: https://github.com/semgrep/pre-commit
+    rev: deab6d496da5b26298b2937aca9a221506cf3a65 # 1.168.0
+    hooks:
+      - id: semgrep
+        require_serial: true
+        args:
+          [
+            '--config',
+            'p/typescript',
+            '--skip-unknown-extensions',
+            '--disable-version-check',
+            '--error',
+            '--quiet'
+          ]
+        stages: [pre-commit, pre-merge-commit]
+        files: \.(ts|tsx|js|jsx|mjs|cjs)$
+        exclude: ^e2e/
+
   - repo: local
     hooks:
       - id: npm-lint