diff --git a/.github/workflows/basic-qa.yml b/.github/workflows/basic-qa.yml
index a9a6fde..64da985 100644
--- a/.github/workflows/basic-qa.yml
+++ b/.github/workflows/basic-qa.yml
@@ -17,6 +17,13 @@ concurrency:
 permissions: {}
 
 jobs:
+  pinact:
+    permissions:
+      contents: read # To clone the repo.
+
+    name: 'Run Pinact'
+    uses: PHPCSStandards/.github/.github/workflows/reusable-pinact.yml@559f40470dbce9f7faeab31f82c0be7dfb93228e # v1.3.0
+
   yamllint:
     permissions:
       contents: read # To clone the repo.
diff --git a/.pinact.yaml b/.pinact.yaml
new file mode 100644
index 0000000..2816e56
--- /dev/null
+++ b/.pinact.yaml
@@ -0,0 +1,8 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/suzuki-shunsuke/pinact/refs/heads/main/json-schema/pinact.json
+# pinact - https://github.com/suzuki-shunsuke/pinact
+
+version: 3
+
+min_age:
+  value: 3     # Default is 7 days
+  always: true # Always check this, not just when updating pins.