diff --git a/.github/workflows/build-check.yml b/.github/workflows/build-check.yml
index 925866c..f459b4b 100644
--- a/.github/workflows/build-check.yml
+++ b/.github/workflows/build-check.yml
@@ -26,3 +26,9 @@ jobs:
 
     - name: Test
       run: go test -v ./...
+      
+    - name: Aqua Security Trivy
+      uses: aquasecurity/trivy-action@0.11.2
+      with:
+        exit-code: 1
+        # ignore unfixed vulnerabilities