feat: automatically comment on PR for govulncheck

Signed-off-by: Marvin Drees <[email protected]>

.github/workflows/linting.yml

@@ -28,6 +28,14 @@ jobs:
         with:
           go-version-file: 'go.mod'
           go-package: ./...
+      - name: Comment on PR
+        if: steps.govulncheck.outcome == 'failure'
+        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6 # v2.5.0
+        with:
+          message: |
+            :warning: **govulncheck found potential vulnerabilities in the code**
+            Check the output here: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ github.job }}
+          comment_tag: govuln
 
   golangci:
     name: golangci-lint