diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 9cc8577d..88755200 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -34,4 +34,5 @@ jobs:
           command: cves
           image: trek:scan
           only-severities: critical,high
+          only-fixed: true
           exit-code: true