Something I love about [govulncheck] (https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck) is that it tries to find usages of code paths that would trigger a vulnerability so it's a more effective scan, and now I wish that every CVE scanner supported it now 😅
Jamie Tanna
.