ci: run govulncheck

diff --git a/ci/run b/ci/run
index 2e12c7c64fdf73ed2a0de908fd99152b943a37f0..4dbfefe1a3ffc1d79bc795756d3281e7f0ad0efc 100755 (executable)
--- a/ci/run
+++ b/ci/run
@@ -32,6 +32,8 @@ make $flags
 make test $flags
 
 # Additional static checks only run in CI
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
 go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
 go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2