diff --git a/.github/workflows/lint-test-build.yml b/.github/workflows/lint-test-build.yml
index 6f213a6..b70a3b6 100644
--- a/.github/workflows/lint-test-build.yml
+++ b/.github/workflows/lint-test-build.yml
@@ -65,7 +65,6 @@ jobs:
       ref: ${{ github.sha }}
       expected-main-sha: ${{ github.ref == 'refs/heads/main' && github.sha || '' }}
       additional-gar-registry: us-docker.pkg.dev/libops-images/public
-      scan: true
       sign: true
     permissions:
       contents: read
diff --git a/ci/workflow_contract_test.go b/ci/workflow_contract_test.go
index c27d42a..57ccbce 100644
--- a/ci/workflow_contract_test.go
+++ b/ci/workflow_contract_test.go
@@ -33,7 +33,6 @@ func TestImagePublicationUsesGuardedSharedContract(t *testing.T) {
 		"libops/.github/.github/workflows/build-push.yaml@main",
 		"additional-gar-registry: us-docker.pkg.dev/libops-images/public",
 		"expected-main-sha:",
-		"scan: true",
 		"sign: true",
 		"GCLOUD_OIDC_POOL: ${{ secrets.GCLOUD_OIDC_POOL }}",
 		"GSA: ${{ secrets.GSA }}",