diff --git a/code-scanning/endorlabs.yml b/code-scanning/endorlabs.yml
index 7c69cb4..59a9a29 100644
--- a/code-scanning/endorlabs.yml
+++ b/code-scanning/endorlabs.yml
@@ -1,7 +1,12 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
 name: Endor Labs
 on:
   push:
-    branches: [ $default-branch ]
+    branches: [ $default-branch, $protected-branches ]
   pull_request:
     branches: [ $default-branch ]
   schedule: