diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 61af98137..c619da9f8 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -1,11 +1,13 @@
 name: govulncheck
 on:
   push:
-    paths:
-      - go.sum
+    #paths:
+    #  - go.sum
   schedule:
     - cron: "0 0 * * *"
 
+permissions: read-all
+
 jobs:
   govulncheck:
     name: govulncheck