diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 43af4bf5b..49960fd60 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -5,6 +5,14 @@ on:
     types: [published]
 
 jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
   build:
     runs-on: ubuntu-latest
     steps:
@@ -30,4 +38,13 @@ jobs:
           credentials: ${{ secrets.FLOW_HOSTING_PROD_SA }}
           path: ./
           glob: 'version.txt'
-          destination: flow-cli/
\ No newline at end of file
+          destination: flow-cli/
+  homebrew:
+      name: Bump Homebrew formula
+      runs-on: ubuntu-latest
+      steps:
+        - uses: mislav/bump-homebrew-formula-action@v1
+          with:
+            formula-name: flow-cli
+          env:
+            COMMITTER_TOKEN: ${{ secrets.COMMITTER_TOKEN }}