diff --git a/.github/workflows/ossf-scorecard.yaml b/.github/workflows/ossf-scorecard.yaml
index 4bb0d49..8c57761 100644
--- a/.github/workflows/ossf-scorecard.yaml
+++ b/.github/workflows/ossf-scorecard.yaml
@@ -15,6 +15,7 @@ permissions: {}
 jobs:
   analysis:
     name: Scorecard analysis
+    if: github.event.repository.visibility == 'public'
     runs-on: ubuntu-24.04
     permissions:
       # Needed to checkout the repository and for scorecard to analyze commits.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ed9847e..47913f1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 however this project does not use Semantic Versioning and there are no releases.
 Instead this file uses a date-based structure.
 
+## 2026-02-06
+
+### Changed
+
+- Skip `ossf-scorecard` workflow in private repositories to avoid unnecessary failures.
+
 ## 2026-02-05
 
 ### Fixed