diff --git a/.travis.yml b/.travis.yml
index 4009b62af..b7fc1f771 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -20,7 +20,6 @@ branches:
 env:
   global:
     - GO111MODULE=on
-    - GOSEC_VERSION=2.0.0
     - TEST_COVERAGE=stdout
     - GO_METALINTER_THREADS=1
     - GO_COVER_DIR=_output
@@ -70,6 +69,7 @@ jobs:
           "https://install.goreleaser.com/github.com/golangci/golangci-lint.sh"
           | bash -s -- -b $GOPATH/bin "${GOLANGCI_VERSION}"
         # install gosec
+        - export GOSEC_VERSION=$(source build.env ; echo ${GOSEC_VERSION})
         - curl -sfL
           "https://raw.githubusercontent.com/securego/gosec/master/install.sh"
           | sh -s -- -b $GOPATH/bin "${GOSEC_VERSION}"
diff --git a/build.env b/build.env
index 408b95f2d..1d1c21258 100644
--- a/build.env
+++ b/build.env
@@ -15,3 +15,4 @@ GO111MODULE=on
 
 # static checks and linters
 GOLANGCI_VERSION=v1.21.0
+GOSEC_VERSION=2.0.0
diff --git a/scripts/Dockerfile.test b/scripts/Dockerfile.test
index d67d6645f..5d114d395 100644
--- a/scripts/Dockerfile.test
+++ b/scripts/Dockerfile.test
@@ -10,7 +10,6 @@
 
 FROM fedora:latest
 
-ARG GOSEC_VERSION=2.0.0
 ARG GOPATH=/go
 
 ENV \