x/vuln: golang/govulncheck-action@v1 too hard to use

[kaihendry]

Usability is poor, only seems to work with go-version-input specified. 🤦

https://github.com/kaihendry/yyyymmdd/actions/runs/11000836330/job/30544123107 is an example of a run without go-version-input.

https://github.com/golang/govulncheck-action

[gabyhelp]

Related Issues and Documentation

• govulncheck-action: allow users to use specific version of govulncheck #67782

_{(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)}

[zpavlinovic]

I noticed that both in golangcli and govulncheck actions runs, executing actions/setup-go@v5 has problems:

/usr/bin/tar: ../../../go/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.0.linux-amd64/go.env: Cannot open: File exists
/usr/bin/tar: ../../../go/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.0.linux-amd64/src/bootstrap.bash: Cannot open: File exists
/usr/bin/tar: ../../../go/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.0.linux-amd64/src/race.bat: Cannot open: File exists
/usr/bin/tar: ../../../go/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.0.linux-amd64/src/html/entity.go: Cannot open: File exists
/usr/bin/tar: ../../../go/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.0.linux-amd64/src/html/example_test.go: Cannot open: File exists
...

Does this issue appear when using a specific go-version-input?

[gopherbot]

Change https://go.dev/cl/616435 mentions this issue: action.yml: make sure the latest Go version is default