chore: re-enable govulncheck

Upstream issue was fixed: golang/go#64112 (comment)

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>

.kres.yaml

@@ -118,8 +118,3 @@ spec:
 kind: service.CodeCov
 spec:
   targetThreshold: 25 # the actual coverage is much higher and reported from the integration test
----
-# see https://github.com/golang/go/issues/64112
-kind: golang.GoVulnCheck
-spec:
-  disabled: true

Dockerfile

@@ -2,7 +2,7 @@
 
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2024-01-23T11:18:17Z by kres latest.
+# Generated on 2024-01-25T16:14:09Z by kres latest.
 
 ARG TOOLCHAIN
 
@@ -87,6 +87,11 @@ COPY .golangci.yml .
 ENV GOGC 50
 RUN --mount=type=cache,target=/root/.cache/go-build --mount=type=cache,target=/root/.cache/golangci-lint --mount=type=cache,target=/go/pkg golangci-lint run --config .golangci.yml
 
+# runs govulncheck
+FROM base AS lint-govulncheck
+WORKDIR /src
+RUN --mount=type=cache,target=/root/.cache/go-build --mount=type=cache,target=/go/pkg govulncheck ./...
+
 # runs unit-tests with race detector
 FROM base AS unit-tests-race
 WORKDIR /src

Makefile

@@ -1,6 +1,6 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2024-01-23T11:18:17Z by kres latest.
+# Generated on 2024-01-25T16:14:09Z by kres latest.
 
 # common variables
 
@@ -163,7 +163,8 @@ fmt:  ## Formats the source code
 		go install mvdan.cc/gofumpt@$(GOFUMPT_VERSION) && \
 		gofumpt -w ."
 
-lint-govulncheck:  ## Disabled govulncheck linter.
+lint-govulncheck:  ## Runs govulncheck linter.
+	@$(MAKE) target-$@
 
 lint-goimports:  ## Runs goimports linter.
 	@$(MAKE) target-$@