[all][chore] Run govulncheck scan separately

.github/workflows/build-and-test-windows.yml

@@ -52,7 +52,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.7
+          go-version: ~1.19.8
       - name: Cache Go
         id: go-mod-cache
         uses: actions/cache@v3

.github/workflows/build-and-test.yml

@@ -130,6 +130,29 @@ jobs:
             echo "One or more matrix jobs failed."
             false
           fi
+  govulncheck:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@v3
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: ~1.19.8
+      - name: Cache Go
+        id: go-cache
+        uses: actions/cache@v3
+        with:
+          path: |
+            ~/go/bin
+            ~/go/pkg/mod
+          key: go-cache-${{ runner.os }}-${{ hashFiles('**/go.sum') }}
+      - name: Install Tools
+        if: steps.go-cache.outputs.cache-hit != 'true'
+        run: make install-tools
+      - name: Run `govulncheck`
+        run: make govulncheck
   checks:
     runs-on: ubuntu-latest
     needs: [setup-environment]

.github/workflows/changelog.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.7
+          go-version: ~1.19.8
       - name: Cache Go
         id: go-cache
         uses: actions/cache@v3

.github/workflows/codeql-analysis.yml

@@ -26,7 +26,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.7
+          go-version: ~1.19.8
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/create-dependabot-pr.yml

@@ -11,7 +11,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.7
+          go-version: ~1.19.8
       - name: Run dependabot-pr.sh
         run: ./.github/workflows/scripts/dependabot-pr.sh
         env:

.github/workflows/prepare-release.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.7
+          go-version: ~1.19.8
       - name: Prepare release for contrib
         working-directory: opentelemetry-collector-contrib
         env:

.github/workflows/prometheus-compliance-tests.yml

@@ -32,7 +32,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.7
+          go-version: ~1.19.8
       - name: Cache Go
         id: go-cache
         uses: actions/cache@v3