diff --git a/.github/workflows/run-trivy.yaml b/.github/workflows/run-trivy.yaml
index 2037717a5..187888538 100644
--- a/.github/workflows/run-trivy.yaml
+++ b/.github/workflows/run-trivy.yaml
@@ -23,6 +23,7 @@ jobs:
           exit-code: "1"
           ignore-unfixed: true
           severity: CRITICAL,HIGH
+          scan-ref: infra/terraform
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2