feat: govulncheck

.github/workflows/format.yml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: 1.22
-      - name: Install Go formatting tooling
+      - name: Install tools
         run: make install-format-go
       - name: Formatting check
         run: make format-go

.github/workflows/lint.yml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: 1.22
-      - name: Install golangci-lint
+      - name: Install tools
         run: make install-lint-go
       - name: Run golangci-lint
         run: make lint-go

.github/workflows/vuln.yml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: 1.22
-      - name: Install gosec
+      - name: Install tools
         run: make install-vuln-go
       - name: Run vulnerability check
         run: make vuln-go

Makefile

@@ -48,6 +48,7 @@ lint-go:
 .PHONY: vuln-go
 vuln-go:
 	cd tests/go && \
+		govulncheck ./... && \
 		go vet ./... && \
 		gosec ./...
 
@@ -69,5 +70,6 @@ install-lint-go:
 
 .PHONY: install-vuln-go
 install-vuln-go:
+	go install golang.org/x/vuln/cmd/govulncheck@latest
 	go install github.com/securego/gosec/v2/cmd/gosec@latest