diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a87104e..3086876 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,3 +28,9 @@ jobs:
 
       - name: go test
         run: go test -race ./...
+
+      - uses: dominikh/staticcheck-action@v1
+        with:
+          version: latest
+
+      - uses: golang/govulncheck-action@v1