Add workflow govulncheck to detect vulnerabilitied

[peczenyj]

GitHub Action for govulncheck

https://github.com/golang/govulncheck-action

[quasilyte]

@cristaloleg do you know anything about this dependency review action?

[cristaloleg]

My 2c: I prefer verifying Go code via govulncheck https://go.dev/blog/govulncheck (by example https://github.com/cristalhq/.github/blob/main/.github/workflows/vuln.yml) and nothing else.

Also, I don't check Github Actions deps 'cause it's mostly checkout my code and install Go.

[cristaloleg]

Official govulncheck Github Action https://github.com/golang/govulncheck-action

[peczenyj]

how about now?