diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index 5792ed6..a579ae6 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -1,11 +1,21 @@
 name: FOSSA
 
+permissions:
+  contents: read
+
+
 on:
   push:
+    branches:
+      - master
   pull_request:
   workflow_dispatch:
   merge_group:
     types: [checks_requested]
+  workflow_call:
+    secrets:
+      FOSSA_PUB_API_KEY:
+        required: true
 
 jobs:
   fossa: