diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 5e7cda98..af5345e1 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -53,13 +53,7 @@ jobs:
   image-scan:
     runs-on: ubuntu-24.04
     steps:
-      # The image repository needs a login to pull.
-      - name: Log in to Docker Hub
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
-        with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_TOKEN }}
-
+      # The image is public, so the scan pulls it without Docker Hub credentials.
       - name: Scan the published gateway image
         uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with: