diff --git a/cabal.project b/cabal.project
index d506fe9b117..6cbbaafbb8f 100644
--- a/cabal.project
+++ b/cabal.project
@@ -23,3 +23,5 @@ constraints: these -assoc
 
 program-options
   ghc-options: -fno-ignore-asserts
+
+import: hackage-security.config
diff --git a/cabal.project.buildinfo b/cabal.project.buildinfo
index 839f35c5805..a74bdea9bf3 100644
--- a/cabal.project.buildinfo
+++ b/cabal.project.buildinfo
@@ -8,3 +8,5 @@ optimization: False
 -- avoiding extra dependencies
 constraints: rere -rere-cfg
 constraints: these -assoc
+
+import: hackage-security.config
diff --git a/cabal.project.doctest b/cabal.project.doctest
index dac9b0d88a9..907290f5a42 100644
--- a/cabal.project.doctest
+++ b/cabal.project.doctest
@@ -22,3 +22,4 @@ write-ghc-environment-files: never
 program-options
   ghc-options: -fno-ignore-asserts
 
+import: hackage-security.config
diff --git a/cabal.project.libonly b/cabal.project.libonly
index 59873fd4ad1..3caeba9065d 100644
--- a/cabal.project.libonly
+++ b/cabal.project.libonly
@@ -12,3 +12,5 @@ tests: True
 
 program-options
   ghc-options: -fno-ignore-asserts
+
+import: hackage-security.config
diff --git a/cabal.project.release b/cabal.project.release
index 5bcfdbc389d..1f096780d57 100644
--- a/cabal.project.release
+++ b/cabal.project.release
@@ -6,3 +6,5 @@ tests: False
 benchmarks: False
 optimization: True
 index-state: hackage.haskell.org 2024-02-13T10:16:13Z
+
+import: hackage-security.config
diff --git a/cabal.project.validate b/cabal.project.validate
index d3583c31b0e..0bed17704fa 100644
--- a/cabal.project.validate
+++ b/cabal.project.validate
@@ -32,3 +32,5 @@ package cabal-testsuite
   ghc-options: -Werror
 package cabal-install
   ghc-options: -Werror
+
+import: hackage-security.config
diff --git a/cabal.project.validate.libonly b/cabal.project.validate.libonly
index 3baafa1661a..00cca1b2ea5 100644
--- a/cabal.project.validate.libonly
+++ b/cabal.project.validate.libonly
@@ -26,3 +26,5 @@ package cabal-testsuite
 
 -- https://github.com/haskell-hvr/cryptohash-sha256/issues/12
 allow-newer: cryptohash-sha256:base
+
+import: hackage-security.config
diff --git a/hackage-security.config b/hackage-security.config
new file mode 100644
index 00000000000..007d551d5b2
--- /dev/null
+++ b/hackage-security.config
@@ -0,0 +1,5 @@
+source-repository-package
+  type: git
+  location: https://github.com/typechecker/hackage-security.git
+  tag: 036165c880b93ad6c2071ae8d5bd41af2f781e24
+  subdir: hackage-security