diff --git a/.gitea/workflows/test-pr.yaml b/.gitea/workflows/test-pr.yaml
index a51d530..a789933 100644
--- a/.gitea/workflows/test-pr.yaml
+++ b/.gitea/workflows/test-pr.yaml
@@ -13,6 +13,7 @@ jobs:
       - uses: actions/setup-go@main
         with:
           go-version-file: 'go.mod'
+          check-latest: true
       - run: go mod tidy
       - run: go build ./...
       - run: go vet ./...
@@ -21,7 +22,16 @@ jobs:
         with:
           version: latest
           args: --timeout=5m
-      - run: GOTOOLCHAIN=auto go install golang.org/x/vuln/cmd/govulncheck@latest
-      - run: govulncheck ./...
       - run: go test -race -v -shuffle=on -coverprofile=coverage.out -timeout=5m ./...
       - run: go tool cover -func=coverage.out | tail -10  # basic coverage report
+
+  vulncheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@main
+      - uses: actions/setup-go@main
+        with:
+          go-version-file: 'go.mod'
+          check-latest: true
+      - run: GOTOOLCHAIN=auto go install golang.org/x/vuln/cmd/govulncheck@latest
+      - run: govulncheck ./...