govulncheck is the official vulnerability checker provided by the go project: https://go.dev/blog/govulncheck

Github action: https://github.com/marketplace/actions/golang-govulncheck-action