diff --git a/.gitlab/ci/.code-quality-ci.yml b/.gitlab/ci/.code-quality-ci.yml
index 2ebadd27f2e7a7d7d6f98b07387b73ea8a936131..8b9b87b326f2463384fad03e62a9e860d4f2d38b 100644
--- a/.gitlab/ci/.code-quality-ci.yml
+++ b/.gitlab/ci/.code-quality-ci.yml
@@ -11,3 +11,11 @@ code-quality:
         paths:
             - gl-code-quality-report.json
     needs: []
+
+code-vulnerability:
+    image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/golang:1.19-bullseye
+    stage: analyze
+    script:
+        - go install golang.org/x/vuln/cmd/govulncheck@latest
+        - govulncheck ./...
+    needs: []