steps:
- name: vuln-check
  image: golang:1.23.2
  commands:
    - go install golang.org/x/vuln/cmd/govulncheck@latest
    - govulncheck ./...
  when:
    - event: push