diff --git a/.github/workflows/go-ci.yaml b/.github/workflows/go-ci.yaml
index 10f012a..182ddfd 100644
--- a/.github/workflows/go-ci.yaml
+++ b/.github/workflows/go-ci.yaml
@@ -125,3 +125,7 @@ jobs:
           exit-code: "1"
           ignore-unfixed: true
           vuln-type: "library"
+      - name: Run govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-file: go.mod