diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 8c19c9386..f4a6d4792 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -229,9 +229,15 @@ jobs:
         module: [api, common, .]
       fail-fast: false
     steps:
-      - id: govulncheck
-        uses: golang/govulncheck-action@v1
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install devbox
+        uses: jetify-com/devbox-install-action@v0.9.0
         with:
-          work-dir: ${{ matrix.module }}
-          go-version-file: go.mod
-          check-latest: true
+          enable-cache: true
+
+      - id: govulncheck
+        run: devbox run -- make govulncheck.${{ matrix.module }}
diff --git a/make/go.mk b/make/go.mk
index afba74a9f..596b2e51c 100644
--- a/make/go.mk
+++ b/make/go.mk
@@ -212,4 +212,4 @@ endif
 .PHONY: ggovulncheck.%
 govulncheck.%: ## Runs golangci-lint for a specific module
 govulncheck.%: ; $(info $(M) running govulncheck on $* module)
-	$(if $(filter-out root,$*),cd $* && )govulncheck ./...
+	$(if $(filter-out root .,$*),cd $* && )govulncheck ./...