Replace gosec with govulncheck for Go 1.26.0 compatibility

Author: rossigee

.github/workflows/build.yml

@@ -109,10 +109,8 @@ jobs:
             ${{ runner.os }}-go-1.21.13-
             ${{ runner.os }}-go-
 
-      - name: Run security scan
-        uses: securego/gosec@v2.24.0
-        with:
-          args: '-fmt sarif -out gosec.sarif -stdout -verbose=text -exclude=G101 -exclude=G303 -exclude=G204 -exclude=G302 -exclude=G301 -exclude=G304 ./...'
+      - name: Run vulnerability check
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest && govulncheck ./...
 
       - name: Upload security results
         uses: github/codeql-action/upload-sarif@v4