diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index 6b61e204c0..84a4ea216c 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -47,4 +47,4 @@ jobs:
     - name: Run zizmor
       uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
       with:
-        advanced-security: ${{ github.repository_owner == 'apache' }}
+        advanced-security: ${{ github.repository_owner == 'apache' && github.event_name == 'push' }}