Add security scan (#2454)

Reviewed-on: https://gitea.com/xorm/xorm/pulls/2454

.gitea/workflows/test-sqlite.yml

@@ -25,3 +25,13 @@ jobs:
         run: make test-sqlite3
       - name: test sqlite3 with cache
         run: TEST_CACHE_ENABLE=true make test-sqlite3
+  
+  govulncheck_job:
+    runs-on: ubuntu-latest
+    name: Run govulncheck
+    steps:
+      - id: govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-file: 'go.mod'
+          go-package: ./...