diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 0f235bf..d0e4345 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -51,6 +51,7 @@ jobs:
         with:
           image: protonmail-bridge:latest
           fail-build: true
+          severity-cutoff: critical
           acs-report-enable: true
       - name: Upload Anchore scan SARIF report
         uses: github/codeql-action/upload-sarif@v1
diff --git a/.github/workflows/deb.yaml b/.github/workflows/deb.yaml
index efb71dc..639129d 100644
--- a/.github/workflows/deb.yaml
+++ b/.github/workflows/deb.yaml
@@ -49,6 +49,7 @@ jobs:
         with:
           image: protonmail-bridge:latest
           fail-build: true
+          severity-cutoff: critical
           acs-report-enable: true
       - name: Upload Anchore scan SARIF report
         uses: github/codeql-action/upload-sarif@v1