ci: run vulnerability scan in its own task

Author: otternq

.github/workflows/go_lib_pull_requests.yml

@@ -105,7 +105,7 @@ jobs:
       - name: go test
         run:
           find . -name vendor -prune -o -name go.mod -print | xargs -n1 dirname
-          | xargs -n1 -I{} bash -c "pushd {}; go test --race -v ./..."
+          | xargs -n1 -I{} bash -c "pushd {}; go test -coverprofile=coverage.txt --race -v ./..."
       - name: Upload test coverage results to Codecov
         uses: codecov/codecov-action@v4
         with:
@@ -143,5 +143,3 @@ jobs:
       - id: govulncheck
         run: find . -name vendor -prune -o -name go.mod -print | xargs -n1 dirname
           | xargs -n1 -I{} bash -c "pushd {}; govulncheck ./..."
-          | xargs -n1 -I{} bash -c "pushd {}; go test -coverprofile=coverage.txt --race -v ./..."
-