do not pass Go runs all general checks for Golang applications, all steps must pass for workflow to pass.
govulncheck is install using 'go install' and is used to scan the application dependencies and standard library.
gosec is used for static code analysis.