chore: add govulncheck to ci (#2471)

Author: tzneal

Makefile

@@ -71,6 +71,7 @@ verify: codegen ## Verify code. Includes dependencies, linting, formatting, etc
 		fi;}
 	@echo "Validating codegen/docgen build scripts..."
 	@find hack/code hack/docs -name "*.go" -type f -exec go build -o /dev/null {} \;
+	@govulncheck ./pkg/...
 
 licenses: ## Verifies dependency licenses
 	go mod download

hack/toolchain.sh

@@ -19,6 +19,7 @@ tools() {
     go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.8.0
     go install github.com/sigstore/cosign/cmd/cosign@v1.10.0
     go install github.com/gohugoio/hugo@v0.97.3+extended
+    go install golang.org/x/vuln/cmd/govulncheck@v0.0.0-20220902211423-27dd78d2ca39
 
     if ! echo "$PATH" | grep -q "${GOPATH:-undefined}/bin\|$HOME/go/bin"; then
         echo "Go workspace's \"bin\" directory is not in PATH. Run 'export PATH=\"\$PATH:\${GOPATH:-\$HOME/go}/bin\"'."