diff --git a/.github/actions/rl-scanner/action.yml b/.github/actions/rl-scanner/action.yml
deleted file mode 100644
index 4db68930..00000000
--- a/.github/actions/rl-scanner/action.yml
+++ /dev/null
@@ -1,72 +0,0 @@
-name: 'RL-Security-Scanner'
-description: 'Runs the Reversing Labs scanner on a specified artifact.'
-
-inputs:
-  artifact-path:
-    description: 'Path to the artifact to be scanned.'
-    required: true
-  version:
-    description: 'Version of the artifact.'
-    required: true
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Set up Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: '3.10'
-
-    - name: Install Python dependencies
-      shell: bash
-      run: |
-        pip install boto3 requests
-
-    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
-      with:
-        role-to-assume: ${{ env.PRODSEC_TOOLS_ARN }}
-        aws-region: us-east-1
-        mask-aws-account-id: true
-
-    - name: Install RL Wrapper
-      shell: bash
-      run: |
-        pip install rl-wrapper --index-url "https://${{ env.PRODSEC_TOOLS_USER }}:${{ env.PRODSEC_TOOLS_TOKEN }}@a0us.jfrog.io/artifactory/api/pypi/python/simple"
-
-    - name: Run RL Scanner
-      shell: bash
-      env:
-        RLSECURE_LICENSE: ${{ env.RLSECURE_LICENSE }}
-        RLSECURE_SITE_KEY: ${{ env.RLSECURE_SITE_KEY }}
-        SIGNAL_HANDLER_TOKEN: ${{ env.SIGNAL_HANDLER_TOKEN }}
-        PYTHONUNBUFFERED: 1
-      run: |
-        if [ ! -f "${{ inputs.artifact-path }}" ]; then
-          echo "Artifact not found: ${{ inputs.artifact-path }}"
-          exit 1
-        fi
-
-        rl-wrapper \
-          --artifact "${{ inputs.artifact-path }}" \
-          --name "${{ github.event.repository.name }}" \
-          --version "${{ inputs.version }}" \
-          --repository "${{ github.repository }}" \
-          --commit "${{ github.sha }}" \
-          --build-env "github_actions" \
-          --suppress-output
-
-        # Check the outcome of the scanner
-        if [ $? -ne 0 ]; then
-          echo "RL Scanner failed."
-          echo "scan-status=failed" >> $GITHUB_ENV
-          exit 1
-        else
-          echo "RL Scanner passed."
-          echo "scan-status=success" >> $GITHUB_ENV
-        fi
-
-outputs:
-  scan-status:
-    description: 'The outcome of the scan process.'
-    value: ${{ env.scan-status }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 809f4820..e8298fec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,17 +17,43 @@ permissions:
 
 jobs:
   rl-scanner:
-    uses: ./.github/workflows/rl-secure.yml
-    with:
-      node-version: '22'
-      artifact-name: 'react-native-auth0.tgz'
-    secrets:
-      RLSECURE_LICENSE: ${{ secrets.RLSECURE_LICENSE }}
-      RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
-      SIGNAL_HANDLER_TOKEN: ${{ secrets.SIGNAL_HANDLER_TOKEN }}
-      PRODSEC_TOOLS_USER: ${{ secrets.PRODSEC_TOOLS_USER }}
-      PRODSEC_TOOLS_TOKEN: ${{ secrets.PRODSEC_TOOLS_TOKEN }}
-      PRODSEC_TOOLS_ARN: ${{ secrets.PRODSEC_TOOLS_ARN }}
+    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request' && github.event.pull_request.merged && startsWith(github.event.pull_request.head.ref, 'release/'))
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Build package
+        run: yarn build
+
+      - name: Create tgz build artifact
+        run: |
+          tar -czvf react-native-auth0.tgz *
+
+      - name: Get version
+        id: get_version
+        run: |
+          version=$(head -1 .version)
+          echo "version=$version" >> $GITHUB_OUTPUT
+
+      - name: Run RL Scanner
+        uses: auth0/devsecops-tooling/.github/actions/rl-scan@main
+        with:
+          artifact-name: "react-native-auth0"
+          artifact-path: "${{ github.workspace }}/react-native-auth0.tgz"
+          version: ${{ steps.get_version.outputs.version }}
+          RLSECURE_LICENSE: ${{ secrets.RLSECURE_LICENSE }}
+          RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
+          SIGNAL_HANDLER_TOKEN: ${{ secrets.SIGNAL_HANDLER_TOKEN }}
+          SIGNAL_HANDLER_DOMAIN: ${{ secrets.SIGNAL_HANDLER_DOMAIN }}
+          PRODSEC_TOOLS_ARN: ${{ secrets.PRODSEC_TOOLS_ARN }}
+          PRODSEC_TOOLS_USER: ${{ secrets.PRODSEC_TOOLS_USER }}
+          PRODSEC_TOOLS_TOKEN: ${{ secrets.PRODSEC_TOOLS_TOKEN }}
+          PRODSEC_PYTHON_TOOLS_REPO: ${{ secrets.PRODSEC_PYTHON_TOOLS_REPO }}
 
   release:
     uses: ./.github/workflows/npm-release.yml
diff --git a/.github/workflows/rl-secure.yml b/.github/workflows/rl-secure.yml
deleted file mode 100644
index abe9190d..00000000
--- a/.github/workflows/rl-secure.yml
+++ /dev/null
@@ -1,71 +0,0 @@
-name: RL-Secure Workflow
-run-name: rl-security-scanner
-
-on:
-  workflow_call:
-    inputs:
-      node-version:
-        required: true
-        type: string
-      artifact-name:
-        required: true
-        type: string
-    secrets:
-      RLSECURE_LICENSE:
-        required: true
-      RLSECURE_SITE_KEY:
-        required: true
-      SIGNAL_HANDLER_TOKEN:
-        required: true
-      PRODSEC_TOOLS_USER:
-        required: true
-      PRODSEC_TOOLS_TOKEN:
-        required: true
-      PRODSEC_TOOLS_ARN:
-        required: true
-
-jobs:
-  rl-scanner:
-    name: Run Reversing Labs Scanner
-    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request' && github.event.pull_request.merged && startsWith(github.event.pull_request.head.ref, 'release/'))
-    runs-on: ubuntu-latest
-
-    outputs:
-      scan-status: ${{ steps.rl-scan-conclusion.outcome }}
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Setup
-        uses: ./.github/actions/setup
-
-      - name: Build package
-        shell: bash
-        run: yarn build
-
-      - name: Create tgz build artifact
-        run: |
-          tar -czvf ${{ inputs.artifact-name }} *
-
-      - id: get_version
-        uses: ./.github/actions/get-version
-
-      - name: Run RL Scanner
-        id: rl-scan-conclusion
-        uses: ./.github/actions/rl-scanner
-        with:
-          artifact-path: '$(pwd)/${{ inputs.artifact-name }}'
-          version: '${{ steps.get_version.outputs.version }}'
-        env:
-          RLSECURE_LICENSE: ${{ secrets.RLSECURE_LICENSE }}
-          RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
-          SIGNAL_HANDLER_TOKEN: ${{ secrets.SIGNAL_HANDLER_TOKEN }}
-          PRODSEC_TOOLS_USER: ${{ secrets.PRODSEC_TOOLS_USER }}
-          PRODSEC_TOOLS_TOKEN: ${{ secrets.PRODSEC_TOOLS_TOKEN }}
-          PRODSEC_TOOLS_ARN: ${{ secrets.PRODSEC_TOOLS_ARN }}
-
-      - name: Output scan result
-        run: echo "scan-status=${{ steps.rl-scan-conclusion.outcome }}" >> $GITHUB_ENV