diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 84fa98b6be..c70714fd75 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -21,6 +21,8 @@ jobs:
           go-version: ${{ matrix.go-version }}
           check-latest: true
 
+      - uses: golang/govulncheck-action@dd3ead030e4f2cf713062f7a3395191802364e13 # v1
+
       - run: |
           go build ./...
           go test -run=^$ ./...