diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 86ba064..eded0f1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -51,6 +51,9 @@ jobs:
             exit 1
           fi
 
+      - name: Check for known vulnerabilities
+        run: go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...
+
       - name: Build the release the same way a tag would
         uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
diff --git a/go.mod b/go.mod
index 7558133..15afc40 100644
--- a/go.mod
+++ b/go.mod
@@ -1,3 +1,5 @@
 module github.com/siliconwitchery/superstack-cli
 
 go 1.25
+
+toolchain go1.26.10