diff --git a/.github/scripts/scan-malware.js b/.github/scripts/scan-malware.js
index 1401cd1e2..4d0b8b052 100644
--- a/.github/scripts/scan-malware.js
+++ b/.github/scripts/scan-malware.js
@@ -38,6 +38,7 @@ const ALWAYS_SKIP = new Set([
   "coverage",
   ".nyc_output",
   "__pycache__",
+  "scan-malware.js",
 ]);
 
 const ENTROPY_THRESHOLD = 5.2; // Shannon bits/char – high = likely encoded payload