diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index a7aaef0..c5f8115 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -16,8 +16,8 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "~1.16"
-      - run: go test -race ./...
+          go-version: "~1.17"
+      - run: go test -race -coverprofile=coverage.out ./...
   build:
     name: Build
     runs-on: ${{ matrix.os }}
@@ -28,13 +28,24 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "~1.16"
+          go-version: "~1.17"
       - run: go build
-  lint:
-    name: Lint
+  golangci-lint:
+    name: golangci-lint
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
       - uses: golangci/golangci-lint-action@v2
         with:
           version: latest
+  semgrep:
+    name: semgrep
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: returntocorp/semgrep-action@v1
+        with:
+          config: >-
+            p/security-audit
+            p/secrets
+            p/golang