diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index dccb989..b5954fa 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -5,6 +5,9 @@ jobs:
   scans:
     runs-on: smoke-test
     steps:
+      - name: "clone code"
+        uses: actions/checkout@v4
+        
       - name: "dependency and stdlib scan"
         uses: golang/govulncheck-action@v1.0.4
         with: