diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml
index da080f8..f266fca 100644
--- a/.github/workflows/secrets-scan.yml
+++ b/.github/workflows/secrets-scan.yml
@@ -24,5 +24,7 @@ jobs:
       security-events: write
       actions: read
       pull-requests: read
+    with:
+      fail-on-findings: true
     secrets: inherit