diff --git a/ci-operator/config/opendatahub-io/opendatahub-operator/opendatahub-io-opendatahub-operator-main.yaml b/ci-operator/config/opendatahub-io/opendatahub-operator/opendatahub-io-opendatahub-operator-main.yaml
index 3e07b896fc82a..33db64bf461cb 100644
--- a/ci-operator/config/opendatahub-io/opendatahub-operator/opendatahub-io-opendatahub-operator-main.yaml
+++ b/ci-operator/config/opendatahub-io/opendatahub-operator/opendatahub-io-opendatahub-operator-main.yaml
@@ -7,6 +7,10 @@ base_images:
     name: "4.19"
     namespace: origin
     tag: operator-sdk
+  tls-scanner-tool:
+    name: "4.22"
+    namespace: ocp
+    tag: tls-scanner-tool
   ubi:
     name: ubi-minimal
     namespace: ocp
@@ -121,6 +125,8 @@ tests:
       SOURCE_IMAGE_REF: opendatahub-operator-rhoai
     env:
       IMAGE_REPO: opendatahub-operator
+      PQC_CHECK: "true"
+      SCAN_NAMESPACE: redhat-ods-operator,redhat-ods-applications,redhat-ods-monitoring,rhoai-model-registries
     pre:
     - ref: ipi-install-rbac
     - ref: opendatahub-operator-e2e-cluster-preflight-health-check
@@ -152,6 +158,18 @@ tests:
           cpu: 2000m
           memory: 3Gi
       timeout: 3h0m0s
+    - as: cleanup-olm-catalog
+      cli: latest
+      commands: |
+        oc delete catalogsource --all -n redhat-ods-operator --ignore-not-found
+        oc wait --for=delete pod -l olm.catalogSource -n redhat-ods-operator --timeout=60s || true
+      from: src
+      resources:
+        requests:
+          cpu: 100m
+          memory: 200Mi
+      timeout: 2m0s
+    - ref: tls-scanner-run
     workflow: generic-claim
 - as: opendatahub-operator-image-mirror
   postsubmit: true