diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 9cf768f0..1dcdd67f 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -99,9 +99,14 @@ jobs:
               -PspringPulsarVersion="$VERSION" \
               -PspringBootVersion="$BOOT_VERSION" \
               :runAllSampleTests
+  scan:
+    needs: [prerequisites]
+    if: needs.prerequisites.outputs.runjobs
+    uses: ./.github/workflows/trivy-scan.yml
+
   done:
     runs-on: ubuntu-latest
-    needs: [ build_and_verify, check_samples ]
+    needs: [ build_and_verify, check_samples, scan ]
     steps:
       - name: 'Done'
         shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c255a879..701a24b5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ on:
     inputs:
       run-trivy-scan:
         description: 'Run Trivy scan ?'
-        default: false
+        default: true
         required: false
         type: boolean