diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e0a6260..ae63c2d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,3 +33,9 @@ jobs:
 
       - name: Test
         run: make test
+
+      - name: WriteGoList
+        run: go list -json -m all > go.list
+
+      - name: Nancy scan
+        uses: sonatype-nexus-community/nancy-github-action@main