diff --git a/.github/workflows/presubmit.yaml b/.github/workflows/presubmit.yaml
index e5cc2e81..1df9dfb1 100644
--- a/.github/workflows/presubmit.yaml
+++ b/.github/workflows/presubmit.yaml
@@ -37,3 +37,13 @@ jobs:
           sudo tar -C /usr/local -xzf pluto_${number}_linux_amd64.tar.gz
       - run: |
           /usr/local/pluto detect-files -d .
+  vuln_check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Install `govulncheck`
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: Run `govulncheck`
+        run: ~/go/bin/govulncheck ./...