diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 5e42257c..842e19d8 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -32,3 +32,4 @@ jobs:
           days-before-close: 0
           remove-stale-when-updated: true
           operations-per-run: 100
+          exempt-issue-labels: 'keep,security'