diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index b11ec5264..d1f37de23 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -142,7 +142,7 @@ jobs:
         with:
           path: "."
           fail-build: true
-          severity-cutoff: negligible
+          severity-cutoff: high
       - name: Show Anchore scan SARIF report
         if: always()
         run: cat ${{ steps.scan.outputs.sarif }}