diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml
index b435c9778..b3297a60e 100644
--- a/.github/workflows/reviewdog.yml
+++ b/.github/workflows/reviewdog.yml
@@ -1,7 +1,11 @@
 name: reviewdog
 
+# read-only repo token
+# no access to secrets
 on:
   pull_request:
+    paths-ignore:
+      - '!.github/**'
 
 jobs:
   eslint: