Describe the solution you'd like
Running govulncheck on PRs would help us avoid introducing known security issues.
Running it on main would help us prevent creating releases with known security issues.