diff --git a/.github/workflows/cgo.yml b/.github/workflows/cgo.yml
index d246dd09a2..c914146185 100644
--- a/.github/workflows/cgo.yml
+++ b/.github/workflows/cgo.yml
@@ -1140,6 +1140,8 @@ jobs:
           flag: --actionlint
         - name: poutine
           flag: --poutine
+        - name: runner-guard
+          flag: --runner-guard
     concurrency:
       group: ci-${{ github.ref }}-security-scan-${{ matrix.tool.name }}
       cancel-in-progress: true