[all] Enable govulncheck linter for the whole repo (open-telemetry#19400

)

Enable govulncheck linter

Link to tracking Issue: open-telemetry#19154

---------

Co-authored-by: Alex Boten <alex@boten.ca>

.github/workflows/build-and-test-windows.yml

@@ -52,7 +52,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.6
+          go-version: ~1.19.7
       - name: Cache Go
         id: go-mod-cache
         uses: actions/cache@v3

.github/workflows/changelog.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.6
+          go-version: ~1.19.7
       - name: Cache Go
         id: go-cache
         uses: actions/cache@v3

.github/workflows/codeql-analysis.yml

@@ -26,7 +26,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.6
+          go-version: ~1.19.7
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/create-dependabot-pr.yml

@@ -11,7 +11,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.6
+          go-version: ~1.19.7
       - name: Run dependabot-pr.sh
         run: ./.github/workflows/scripts/dependabot-pr.sh
         env:

.github/workflows/prepare-release.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.6
+          go-version: ~1.19.7
       - name: Prepare release for contrib
         working-directory: opentelemetry-collector-contrib
         env:

.github/workflows/prometheus-compliance-tests.yml

@@ -32,7 +32,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: ~1.19.6
+          go-version: ~1.19.7
       - name: Cache Go
         id: go-cache
         uses: actions/cache@v3

Makefile.Common

@@ -54,8 +54,9 @@ GOIMPORTS           := $(TOOLS_BIN_DIR)/goimports
 PORTO               := $(TOOLS_BIN_DIR)/porto
 CHECKDOC            := $(TOOLS_BIN_DIR)/checkdoc
 CROSSLINK           := $(TOOLS_BIN_DIR)/crosslink
-GOJUNIT             := $(TOOLS_BIN_DIR)/go-junit-report 
+GOJUNIT             := $(TOOLS_BIN_DIR)/go-junit-report
 BUILDER             := $(TOOLS_BIN_DIR)/builder
+GOVULNCHECK         := $(TOOLS_BIN_DIR)/govulncheck
 
 # BUILD_TYPE should be one of (dev, release).
 BUILD_TYPE?=release
@@ -91,7 +92,7 @@ all-pkg-dirs:
 .DEFAULT_GOAL := common
 
 .PHONY: common
-common: checklicense lint misspell
+common: lint
 
 .PHONY: test
 test:
@@ -162,9 +163,13 @@ fmt: $(GOIMPORTS)
 	$(GOIMPORTS) -w  -local github.com/open-telemetry/opentelemetry-collector-contrib ./
 
 .PHONY: lint
-lint: $(LINT) checklicense misspell
+lint: $(LINT) checklicense misspell govulncheck
 	$(LINT) run --allow-parallel-runners --build-tags integration
 
+.PHONY: govulncheck
+govulncheck: $(GOVULNCHECK)
+	$(GOVULNCHECK) ./...
+
 .PHONY: tidy
 tidy:
 	rm -fr go.sum

internal/tools/go.mod

@@ -16,6 +16,7 @@ require (
 	go.opentelemetry.io/build-tools/multimod v0.6.0
 	go.opentelemetry.io/collector/cmd/builder v0.71.1-0.20230208170110-ead716ac04aa
 	golang.org/x/tools v0.7.0
+	golang.org/x/vuln v0.0.0-20230313161840-8a73a7e4f203
 )
 
 require (

internal/tools/tools.go

@@ -36,4 +36,5 @@ import (
 	_ "go.opentelemetry.io/build-tools/multimod"
 	_ "go.opentelemetry.io/collector/cmd/builder"
 	_ "golang.org/x/tools/cmd/goimports"
+	_ "golang.org/x/vuln/cmd/govulncheck"
 )