diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 4d63d619..de9795ec 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -31,6 +31,11 @@ jobs:
           # see https://github.com/golangci/golangci-lint-action/issues/119#issuecomment-981090648 for output
           args: --config=.golangci.yml --verbose --out-${NO_FUTURE}format colored-line-number
           skip-cache: true
+      - name: govulncheck
+        uses: golang/govulncheck-action@dd3ead030e4f2cf713062f7a3395191802364e13
+        with:
+          go-version: '1.20.7'
+          go-package: './...'
       - name: Build
         run: |
           go build ./...