diff --git a/.gitea/workflows/security.yaml b/.gitea/workflows/security.yaml
index 3cee2bc..33b6c86 100644
--- a/.gitea/workflows/security.yaml
+++ b/.gitea/workflows/security.yaml
@@ -7,9 +7,14 @@ jobs:
     steps:
       - name: "clone code"
         uses: actions/checkout@v4
+
+      - name: "static code analysis"
+        uses: securego/gosec@v2.22.3
+        with:
+          args: ./...
       
       - name: "install go"
-        uses: https://code.jakeyoungdev.com/actions/install-go@master
+        uses: https://code.jakeyoungdev.com/actions/install-go@v0.1.3
         with:
             commands: |
                 golang.org/x/vuln/cmd/govulncheck@latest
@@ -18,8 +23,3 @@ jobs:
         uses: https://code.jakeyoungdev.com/actions/report-vulns@master
         with:
           manager: go
-    
-      - name: "static code analysis"
-        uses: securego/gosec@v2.22.3
-        with:
-          args: ./...
\ No newline at end of file