diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml
index 9acf12c..b8c56b7 100644
--- a/.github/workflows/govulncheck.yaml
+++ b/.github/workflows/govulncheck.yaml
@@ -12,7 +12,10 @@ on:
         default: false
 
 env:
-  GO_VERSION: 1.24
+  GO_VERSION: "1.26"
+  # Track latest; pre-v1.3.0 panics in the SSA builder on generic
+  # signatures used by github.com/go-json-experiment/json.
+  GOVULNCHECK_VERSION: latest
 
 jobs:
   govulncheck:
@@ -30,12 +33,12 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
+      - name: Install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@${{ env.GOVULNCHECK_VERSION }}
+
       - name: Run govulncheck
         id: govulncheck
-        uses: golang/govulncheck-action@v1
-        with:
-          go-version-input: ${{ env.GO_VERSION }}
-          cache: false
+        run: govulncheck ./...
 
       - name: Send notification on scheduled run failure
         if: |