feat: add action scan security govulncheck #9096

Signed-off-by: Son Bui <sonbv00@gmail.com>

.github/workflows/vulnerability-scans.yaml

@@ -44,6 +44,15 @@ jobs:
           echo "${TAGS_JSON}"
           echo "TAGS=${TAGS_JSON}" >> $GITHUB_OUTPUT
 
+  govulncheck:
+    name: Run govulncheck
+    runs-on: ubuntu-latest
+    steps:
+      - name: Scan for vulnerabilities in go code
+        uses: golang/govulncheck-action@v1
+        with:
+          check-latest: true
+
   scan:
     runs-on: ubuntu-latest
     needs: version