diff --git a/.gitea/workflows/security.yaml b/.gitea/workflows/security.yaml
index 33b6c86..65da5f4 100644
--- a/.gitea/workflows/security.yaml
+++ b/.gitea/workflows/security.yaml
@@ -7,19 +7,19 @@ jobs:
     steps:
       - name: "clone code"
         uses: actions/checkout@v4
-
-      - name: "static code analysis"
-        uses: securego/gosec@v2.22.3
-        with:
-          args: ./...
       
       - name: "install go"
         uses: https://code.jakeyoungdev.com/actions/install-go@v0.1.3
         with:
-            commands: |
-                golang.org/x/vuln/cmd/govulncheck@latest
+          commands: |
+              golang.org/x/vuln/cmd/govulncheck@latest
 
       - name: "dependency and stdlib scan"
         uses: https://code.jakeyoungdev.com/actions/report-vulns@master
         with:
           manager: go
+
+      - name: "static code analysis"
+        uses: securego/gosec@master
+        with:
+          args: ./...