diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 18afb8e95..d6c47cfd1 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -18,7 +18,7 @@ jobs:
       security-events: write
       contents: read
     steps:
-      - uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
+      - uses: golang/govulncheck-action@032d45514ae346b1db93c04b0c90b841c370344f # v1.1.0
         with:
           # to be explicit, we're only checking the top-level `oapi-codegen` package
           # we are intentionally NOT intending to keep on top of security updates in `internal/test` or `examples`, or any submodules thereof