diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml
new file mode 100644
index 0000000..2558e58
--- /dev/null
+++ b/.github/workflows/coverity-scan.yml
@@ -0,0 +1,55 @@
+name: coverity-scan
+on:
+  schedule:
+    - cron: '0 6 * * *'  # Dayly at 06:00 UTC
+
+jobs:
+  coverity-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+
+      - name: Download Coverity Build Tool
+        shell: bash
+        working-directory: ${{ github.workspace }}
+        run: |
+          wget -q https://scan.coverity.com/download/linux64 --post-data "token=$TOKEN&project=CESNET%2Flibyang" -O coverity-tools.tar.gz
+          mkdir coverity-tools
+          tar xzf coverity-tools.tar.gz --strip 1 -C coverity-tools
+        env:
+          TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
+
+      - name: Fixed world writable dirs
+        run: |
+          chmod go-w $HOME
+          sudo chmod -R go-w /usr/share
+
+      - name: Configure
+        shell: bash
+        working-directory: ${{ github.workspace }}
+        run: |
+          mkdir build
+          cd build
+          CC=clang cmake -DCMAKE_BUILD_TYPE=Debug ..
+
+      - name: Build with cov-build
+        shell: bash
+        working-directory: ${{ github.workspace }}/build
+        run: |
+          export PATH=${{ github.workspace }}/coverity-tools/bin:$PATH
+          cov-build --dir cov-int make
+
+      - name: Submit the result to Coverity Scan
+        shell: bash
+        working-directory: ${{ github.workspace }}/build
+        run: |
+          tar czvf libyang.tgz cov-int
+          curl \
+            --form token=$TOKEN \
+            --form email=rkrejci@cesnet.cz \
+            --form file=@libyang.tgz \
+            --form version="`./yanglint -v | cut -d\" \" -f2`" \
+            --form description="libyang library" \
+            https://scan.coverity.com/builds?project=CESNET%2Flibyang
+        env:
+          TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}