diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index a83ac7c..90ad35f 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -2,6 +2,7 @@ name: zizmor
 on:
   push:
     branches: [main]
+    paths: ['.github/workflows/**']
   pull_request:
     paths: ['.github/workflows/**']
 
@@ -17,3 +18,5 @@ jobs:
         with:
           persist-credentials: false
       - uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
+        with:
+          advanced-security: false