diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 65ce420..26cf767 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -1,6 +1,6 @@
 # GitHub Actions workflow for govulncheck.
 # This file is licensed under MIT License.
-# https://github.com/fxamacker/cbor
+# Copied from https://github.com/fxamacker/cbor
 
 name: govulncheck
 
@@ -10,11 +10,11 @@ permissions: {}
 on:
   workflow_dispatch:
   pull_request:
-      # Run on pull request for all branches.
+    # Run govulncheck on PR for all branches and paths.
   push:
-      # Run on push for all branches.
+    # Run govulncheck on push for all branches and paths.
   schedule:
-    - cron: '45 12 * * *' # Run daily at 12:45 UTC / 7:45 AM Central.
+    - cron: '45 12 * * *' # Daily at 12:45 UTC / 7:45 AM Central
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
@@ -35,11 +35,11 @@ jobs:
     - name: Install Go and setup env
       uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
       with:
-        go-version: 1.23
+        go-version: 1.26
         check-latest: true
  
     - name: Install latest govulncheck
-      run: go install golang.org/x/vuln/cmd/govulncheck@4ea4418106cea3bb2c9aa098527c924e9e1fbbb4 # v1.1.3
+      run: go install golang.org/x/vuln/cmd/govulncheck@0782b76014f15f24e22a438f30f308df42899ba1 # v1.3.0
 
     - name: Run govulncheck
       run: govulncheck -show=traces ./...