add dependency check

.github/workflows/quality-checks.yml

@@ -21,8 +21,28 @@ jobs:
         uses: golangci/golangci-lint-action@v3
         with:
           version: latest
+
+  dep-vulnerability:
+    name: Dependency vulnerability scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Prepare go environment
+        uses: actions/setup-go@v4
+        with:
+          go-version: '1.20'
+          cache: false
+      - name: Install dep scanner
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: Vendoring
+        run: | 
+          go mod vendor
+      - name: Check
+        run: |
+          govulncheck ./...
   tests:
-    name: Test
+    name: Tests
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3