chore(deps): update dependency golangci/golangci-lint to v1.63.3 in .… #550

	name: Security

	on:
	push:
	tags:
	- v*
	branches:
	- main
	pull_request:

	permissions:
	contents: read

	jobs:
	# ------------------------------

	govulncheck:
	runs-on: ubuntu-latest
	name: govulncheck
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- uses: arduino/setup-task@v2
	with:
	# renovate: datasource=github-releases depName=go-task/task
	version: 3.40.1
	repo-token: ${{ secrets.GITHUB_TOKEN }}

	- name: setup
	run: task setup

	- name: install govulncheck
	run: go install golang.org/x/vuln/cmd/govulncheck@latest

	- name: run govulncheck
	run: govulncheck ./...

	# ------------------------------

	gitleaks:
	runs-on: ubuntu-latest
	name: gitleaks
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- uses: gitleaks/gitleaks-action@v2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}}
	if: ${{ env.GITLEAKS_LICENSE != '' }}

	# -----------------------------

	grype-scan:
	runs-on: ubuntu-latest
	name: grype-scan

	permissions:
	security-events: write
	actions: read
	contents: read

	steps:
	- uses: actions/checkout@v4

	- uses: anchore/scan-action@v6
	with:
	path: "."
	fail-build: true

Provide feedback