I tried using govulncheck-action and found out it warns about inability to create/use go cache in Post-Run action:

Failed to save: Unable to reserve cache with key setup-go-Linux-ubuntu24-go-1.23.0-57e5a0cc3f57cde7b8a8680dd8add3a3ecb87e2a81b18cf65ac8d2064e969869, another job may be creating this cache. More details: This legacy service is shutting down, effective April 15, 2025. Migrate to the new service ASAP. For more information: https://gh.io/gha-cache-sunset

This was fixed by a recent update of actions/setup-go: https://github.com/actions/setup-go/releases/tag/v5.3.0

This should be fixed by
https://go-review.googlesource.com/c/govulncheck-action/+/670318