diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 792fc9b..13ba49c 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -3,8 +3,10 @@ name: GitHub Actions security analysis
 on:
   push:
     branches: ['main']
+    paths: ['.github/workflows/**']
   pull_request:
     branches: ['**']
+    paths: ['.github/workflows/**']
 
 concurrency:
   group: zizmor-${{ github.ref }}