diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7f4a35c..22a68b7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -15,7 +15,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.15
+          go-version: 1.16
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index bb79263..d55ca33 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,25 +1,24 @@
 name: lint
 on:
   push:
-    tags:
-      - v*
     branches:
       - master
   pull_request:
 jobs:
   golangci:
-    strategy:
-      matrix:
-        go-version: [1.15.x]
-        os: [ubuntu-latest]
     name: lint
-    runs-on: ${{ matrix.os }}
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
+      - uses: actions/setup-go@v2
+        with:
+          go-version: ^1.16
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v2
         with:
           # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
           version: latest
+          # Optional: golangci-lint command line arguments.
+          args: --enable gosec
       - name: testing
         run: go test ./...
diff --git a/.github/workflows/vulns.yml b/.github/workflows/vulns.yml
index 3df4099..7f5b264 100644
--- a/.github/workflows/vulns.yml
+++ b/.github/workflows/vulns.yml
@@ -14,8 +14,10 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: ^1.13
+          go-version: ^1.16
+      - name: install depm
+        run: go install github.com/spiegel-im-spiegel/depm@latest
       - name: WriteGoList
-        run: go list -json -m all > go.list
+        run: depm list --json > go.list
       - name: Nancy
         uses: sonatype-nexus-community/nancy-github-action@main