diff --git a/.circleci/config.yml b/.circleci/config.yml
index af2547e50..4ab69b5e1 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -402,6 +402,16 @@ jobs:
               --include "*.rpm" \
               --include "*.zip" \
               --acl public-read
+  govulncheck:
+    executor: telegraf-ci
+    steps:
+      - checkout
+      - run:
+          name: Install latest govulncheck
+          command: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - run:
+          name: Scan master with govulncheck
+          command: govulncheck ./...
   docker-nightly:
     machine:
       image: ubuntu-2004:current
@@ -843,3 +853,6 @@ workflows:
       - amd64-package-test-nightly:
           requires:
             - 'amd64-package-nightly'
+      - govulncheck:
+          requires:
+            - 'nightly'