diff --git a/.github/workflows/github_actions_scan.yml b/.github/workflows/github_actions_scan.yml
index 3f776c1..e445da3 100644
--- a/.github/workflows/github_actions_scan.yml
+++ b/.github/workflows/github_actions_scan.yml
@@ -13,7 +13,7 @@ on:
         type: 'string'
   # zizmor: ignore[dangerous-triggers] Required to have `id-token: write` for GCP auth.
   pull_request_target:
-  merge_group:
+  merge_group: WORKGROUP
 
 permissions: {}