Add workflow govulncheck to detect vulnerabilitied

.github/workflows/go.yml

@@ -15,7 +15,11 @@
         {
           "name": "Set up Go ${{ matrix.go }}",
           "uses": "actions/setup-go@v5",
-          "with": {"go-version": "${{ matrix.go }}" },
+          "with": {
+            "go-version": "${{ matrix.go }}",
+            "cache": true,
+            "cache-dependency-path": "**/go.sum",
+           },
           "id": "go",
         },
         {"name": "Check out code into the Go module directory", "uses": "actions/checkout@v4"},
@@ -24,4 +28,4 @@
       ],
     },
   },
-}
+}

.github/workflows/govulncheck.yml

@@ -0,0 +1,17 @@
+# This file adheres to the YAML5 style.
+{
+  "name": "Go Vulnerability Check",
+  "on": ["push"],
+  "jobs": {
+    "govulncheck_job": {
+      "name": "Run govulncheck",
+      "runs-on": "ubuntu-latest",
+      "steps": [
+        {
+          "uses": "golang/govulncheck-action@v1",
+          "id": "govulncheck",
+        },
+      ],
+    },
+  },
+}

README.md

@@ -6,6 +6,7 @@
 [![GoDoc](https://pkg.go.dev/badge/github.com/quasilyte/go-consistent)](http://pkg.go.dev/github.com/quasilyte/go-consistent)
 [![Go](https://github.com/quasilyte/go-consistent/actions/workflows/go.yml/badge.svg)](https://github.com/quasilyte/go-consistent/actions/workflows/go.yml)
 [![Go Report Card](https://goreportcard.com/badge/github.com/quasilyte/go-consistent)](https://goreportcard.com/report/github.com/quasilyte/go-consistent)
+[![Go Vulnerability Check](https://github.com/quasilyte/go-consistent/actions/workflows/govulncheck.yml/badge.svg)](https://github.com/quasilyte/go-consistent/actions/workflows/govulncheck.yml)
 [![License](https://img.shields.io/github/license/quasilyte/go-consistent)](./LICENSE)
 
 Source code analyzer that helps you to make your Go programs more consistent.