As an enhancement to CI, I suggest adding govulncheck: https://github.com/marketplace/actions/golang-govulncheck-action
Activity