diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index ba0b99aafdd..13b58a48273 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -3,9 +3,8 @@ name: Trivy Dockerfile Scan
 on:
   pull_request:
     paths:
-      - "Dockerfile"
       - "docker/Dockerfile*"
-      - "docker/**/Dockerfile*"
+      - "containers/**/Dockerfile*"
   push:
     branches:
       - main
@@ -29,17 +28,7 @@ jobs:
       # Pin trivy-action to the only safe commit after the March 2026 supply chain attack.
       # See: https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
 
-      - name: Run Trivy on Dockerfile (root)
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: config
-          scan-ref: Dockerfile
-          format: table
-          severity: LOW,MEDIUM,HIGH,CRITICAL
-          exit-code: "1"
-
       - name: Run Trivy on Dockerfile.custom_ui
-        if: always()
         uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
         with:
           scan-type: config
@@ -57,53 +46,3 @@ jobs:
           format: table
           severity: LOW,MEDIUM,HIGH,CRITICAL
           exit-code: "1"
-
-      - name: Run Trivy on Dockerfile.database
-        if: always()
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: config
-          scan-ref: docker/Dockerfile.database
-          format: table
-          severity: LOW,MEDIUM,HIGH,CRITICAL
-          exit-code: "1"
-
-      - name: Run Trivy on Dockerfile.non_root
-        if: always()
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: config
-          scan-ref: docker/Dockerfile.non_root
-          format: table
-          severity: LOW,MEDIUM,HIGH,CRITICAL
-          exit-code: "1"
-
-      - name: Run Trivy on Dockerfile.alpine
-        if: always()
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: config
-          scan-ref: docker/Dockerfile.alpine
-          format: table
-          severity: LOW,MEDIUM,HIGH,CRITICAL
-          exit-code: "1"
-
-      - name: Run Trivy on Dockerfile.dev
-        if: always()
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: config
-          scan-ref: docker/Dockerfile.dev
-          format: table
-          severity: LOW,MEDIUM,HIGH,CRITICAL
-          exit-code: "1"
-
-      - name: Run Trivy on Dockerfile.build_from_pip
-        if: always()
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: config
-          scan-ref: docker/build_from_pip/Dockerfile.build_from_pip
-          format: table
-          severity: LOW,MEDIUM,HIGH,CRITICAL
-          exit-code: "1"