configures golang/govulncheck-action (#73)

configures golang/govulncheck-action in this repository

.github/workflows/golangci-lint.yaml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: '1.21'
+          go-version: '1.21.5'
           cache: false
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v3
@@ -49,4 +49,4 @@ jobs:
           # skip-build-cache: true
 
           # Optional: The mode to install golangci-lint. It can be 'binary' or 'goinstall'.
-          # install-mode: "goinstall"
+          # install-mode: "goinstall"

.github/workflows/run-vuln-check.yaml

@@ -0,0 +1,19 @@
+name: Run vuln check
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+
+    - name: vulncheck
+      uses: golang/govulncheck-action@v1
+      with:
+        go-version-input: 1.21.5
+        go-package: ./...

Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM europe-docker.pkg.dev/kyma-project/prod/external/golang:1.21.4-alpine3.18 as builder
+FROM golang:1.21.5 as builder
 ARG TARGETOS
 ARG TARGETARCH