Merge pull request #30856 from gjenkins8/gjenkins/backport_30785

fix: govulncheck workflow [v3 backport]

.github/workflows/govulncheck.yml

@@ -13,6 +13,8 @@ jobs:
     name: govulncheck
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2
       - name: Add variables to environment file
         run: cat ".github/env" >> "$GITHUB_ENV"
       - name: Setup Go