diff --git a/.github/workflows/findsecbugs.yml b/.github/workflows/findsecbugs.yml
index 64ed9bd24..45eabcf97 100644
--- a/.github/workflows/findsecbugs.yml
+++ b/.github/workflows/findsecbugs.yml
@@ -3,11 +3,16 @@ name: "FindSecBugs"
 on:
   push:
     branches:
-      - rh/action-test
-      #- main
-  #pull_request:
-    #branches:
-      #- '**'
+      - main
+  # run on new pushes only for non-draft PRs
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
   workflow_dispatch:
 
 jobs: