diff --git a/.fossa.yml b/.fossa.yml
new file mode 100755
index 000000000..3786d37be
--- /dev/null
+++ b/.fossa.yml
@@ -0,0 +1,19 @@
+# Generated by FOSSA CLI (https://github.com/fossas/fossa-cli)
+# Visit https://fossa.com to learn more
+
+version: 2
+cli:
+  server: https://app.fossa.com
+  fetcher: custom
+  project: git@github.com:pomerium/pomerium.git
+analyze:
+  modules:
+    - name: github.com/pomerium/pomerium/cmd/pomerium
+      type: go
+      target: github.com/pomerium/pomerium/cmd/pomerium
+      path: cmd/pomerium
+
+    - name: github.com/pomerium/pomerium/cmd/pomerium-cli
+      type: go
+      target: github.com/pomerium/pomerium/cmd/pomerium-cli
+      path: cmd/pomerium-cli
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index ff94e37ff..9a49ade6c 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -217,16 +217,16 @@ jobs:
 
       - uses: actions/checkout@v2
 
-      - name: install lichen
-        run: $(cd /tmp; go get github.com/uw-labs/lichen)
-
       - name: retrieve binary
         uses: actions/download-artifact@v2
         with:
           name: pomerium ${{ github.run_id }} ${{ matrix.platform }}
           path: bin/
 
-      - name: golang license check
-        run: |
-          chmod 755 bin/pomerium bin/pomerium-cli
-          lichen --config lichen.yaml bin/pomerium*
+      - name: download envoy
+        run: make get-envoy
+
+      - name: FOSSA Scan
+        uses: fossa-contrib/fossa-action@v1
+        with:
+          fossa-api-key: 18f4ef488f514d06874b75f5809cea93
diff --git a/lichen.yaml b/lichen.yaml
deleted file mode 100644
index c29b58b93..000000000
--- a/lichen.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
-override:
-  - path: "gopkg.in/alecthomas/kingpin.v2"
-    licenses: ["MIT"]
-  - path: "github.com/alecthomas/units"
-    licenses: ["MIT"]
-  - path: "gopkg.in/cookieo9/resources-go.v2"
-    licenses: ["MIT"]