diff --git a/.github/workflows/cortex-gitguardian.yml b/.github/workflows/cortex-gitguardian.yml
new file mode 100644
index 000000000..0f2e724c1
--- /dev/null
+++ b/.github/workflows/cortex-gitguardian.yml
@@ -0,0 +1,24 @@
+name: GitGuardian scan
+
+on:
+  push:
+    branches:
+      - chore/publish-winget
+
+jobs:
+  scanning:
+    name: GitGuardian scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0 # fetch all history so multiple commits can be scanned
+      - name: GitGuardian scan
+        uses: GitGuardian/ggshield/actions/secret@v1.29.0
+        env:
+          GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
+          GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
+          GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}
diff --git a/.github/workflows/cortex-winget.yml b/.github/workflows/cortex-winget.yml
new file mode 100644
index 000000000..ca0b814d0
--- /dev/null
+++ b/.github/workflows/cortex-winget.yml
@@ -0,0 +1,21 @@
+name: Publish to Winget
+
+# on:
+#   push:
+#     branches:
+#       - chore/publish-winget
+
+jobs:
+  publish:
+    runs-on: windows-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Install winget-cli
+        run: |
+          Invoke-WebRequest -Uri https://github.com/microsoft/winget-cli/releases/download/v1.0.11692/Microsoft.DesktopAppInstaller_8wekyb3d8bbwe.appxbundle -OutFile Microsoft.DesktopAppInstaller.appxbundle
+          Add-AppxPackage -Path Microsoft.DesktopAppInstaller.appxbundle
+          winget --version
+      - name: Publish package
+        run: |
+          winget create -i ../../pm-manifests/winget-manifest.yml