diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 2143416..3666238 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -17,7 +17,10 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: ">=1.19.2"
+          # Note this is intentionally the latest 1.x version, not the one we
+          # use in go.mod, as that avoids noise if there are vulnerabilities
+          # in the Go toolchain itself.
+          go-version: ">=1.x"
           check-latest: true
       - name: install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest