BUG packaging not recognized

[miparnisari]

Describe the bug
In https://securityscorecards.dev/viewer/?uri=github.com/authzed/spicedb

it says

Reason
packaging workflow not detected
Details
Warn: no GitHub/GitLab publishing workflow detected.

however, we do publish to GitHub, see the artifacts in https://github.com/orgs/authzed/packages?repo_name=spicedb

and the workflow step is https://github.com/authzed/spicedb/blob/9622de7c2f550b285f9c8d089f136412b9851476/.github/workflows/release.yaml#L41-L53

Reproduction steps
n/a

Expected behavior
The packaging check should pass for this repo.

[AdamKorcz]

Should be fixed by #4673

[spencerschrock]

however, we do publish to GitHub, see the artifacts in https://github.com/orgs/authzed/packages?repo_name=spicedb

and the workflow step is

Currently we search for actions/setup-go, followed by goreleaser/goreleaser-action, where as your workflow doesn't call actions/setup-go.

Instead it uses the Go distribution present in the runner already (which probably uses Go toolchains to download 1.24.0 as specified in your go.mod). I've left a comment in the linked PR about this, and whether or not we should look for setup-go

[AdamKorcz]

To add a bit of context, @miparnisari s workflow calls authzed/actions/setup-go