include go stdlib scan

Author: dduzgun-security

.release/security-scan.hcl

@@ -24,6 +24,7 @@ container {
 binary {
   go_modules = true
   osv        = true
+  go_stdlib  = true
 
   secrets {
     all = true

scan.hcl

@@ -15,9 +15,10 @@
 # unlike the scans configured here, will block releases in CRT.
 
 repository {
-  go_modules   = true
-  npm          = true
-  osv          = true
+  go_modules             = true
+  npm                    = true
+  osv                    = true
+  go_stdlib_version_file = ".go-version"
 
   secrets {
     all = true