diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index d45fe97d..23a31e8d 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -1,6 +1,9 @@
 name: Run Trivy vulnerability scanner
 
-on: [ push ]
+on:
+  push:
+  schedule:
+    - cron: '0 8 * * *'  # runs daily at 8h UTC
 
 jobs:
   main: