diff --git a/packages/create-plugin/templates/github/workflows/ci.yml b/packages/create-plugin/templates/github/workflows/ci.yml
index fff6022b63..368409ba8c 100644
--- a/packages/create-plugin/templates/github/workflows/ci.yml
+++ b/packages/create-plugin/templates/github/workflows/ci.yml
@@ -87,6 +87,10 @@ jobs:
           version: latest
           args: test
 
+      - name: Check backend for vulnerabilities
+        if: steps.check-for-backend.outputs.has-backend == 'true'
+        run: go run golang.org/x/vuln/cmd/govulncheck@v1.5.0 ./...
+
       - name: Check for E2E
         id: check-for-e2e
         run: |