diff --git a/.github/workflows/ci-security.yaml b/.github/workflows/ci-security.yaml
index 9cbe9fd1b036..63a361687064 100644
--- a/.github/workflows/ci-security.yaml
+++ b/.github/workflows/ci-security.yaml
@@ -341,6 +341,7 @@ jobs:
                       --exclude-rule trailofbits.generic.redis-unencrypted-transport.redis-unencrypted-transport \
                       --exclude-rule trailofbits.yaml.docker-compose.port-all-interfaces.port-all-interfaces \
                       --exclude-rule yaml.github-actions.security.audit.unsafe-add-mask-workflow-command.unsafe-add-mask-workflow-command \
+                      --severity=ERROR \
                       --error \
                       --metrics=off \
                       --verbose \