diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index b99db92..056adef 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -1,7 +1,9 @@
 name: Run Trivy vulnerability scanner
 
-
-on: [ push ]
+on:
+  push:
+  schedule:
+    - cron: '0 8 * * *'  # runs daily at 8h UTC
 
 jobs:
   main: