diff --git a/.circleci/config.yml b/.circleci/config.yml
index 3556d9b31..6fa35d579 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,7 +1,7 @@
 version: 2.1
 
 orbs:
-  platform-orb: okta/general-platform-helpers@1.6
+  platform-orb: okta/general-platform-helpers@1.8
 
 aliases:
 
@@ -60,3 +60,12 @@ workflows:
       - jdk17:
           requires:
             - cache-secrets
+  # See OKTA-624750
+  semgrep:
+    jobs:
+      - platform-orb/job-semgrep-prepare:
+          name: semgrep-prepare
+      - platform-orb/job-semgrep-scan:
+          name: "Scan with Semgrep"
+          requires:
+            - semgrep-prepare
\ No newline at end of file