feat: automatically comment on PR for govulncheck

Signed-off-by: Marvin Drees <[email protected]>

.github/workflows/linting.yml

@@ -19,6 +19,8 @@ on:
 name: Linting
 jobs:
   govulncheck_job:
+    permissions:
+      pull-requests: write # Needed to allow writing comments on PRs
     runs-on: ubuntu-latest
     name: govulncheck
     steps:
@@ -28,6 +30,14 @@ jobs:
         with:
           go-version-file: 'go.mod'
           go-package: ./...
+      - name: Comment on PR
+        if: steps.govulncheck.outcome == 'failure'
+        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6 # v2.5.0
+        with:
+          message: |
+            :warning: **govulncheck found potential vulnerabilities in the code**
+            Check the output here: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ github.job }}
+          comment_tag: govuln
 
   golangci:
     name: golangci-lint