diff --git a/.mend b/.mend
index c708b9a..1b9203b 100644
--- a/.mend
+++ b/.mend
@@ -13,6 +13,10 @@
     "enabled": true     
   },
   "remediateSettings": {
+    "workflowRules": {
+      "enabled": true,
+      "minVulnerabilitySeverity": "CRITICAL"
+    },
     "enableRenovate": true,
     "extends": [
       "config:base",