Golangci-lint: Addition of nancy for checking vulnerable dependencies

[kishaningithub]

I would like to have nancy integrated as part of golangci-lint. Nancy is a a tool to check for vulnerabilities in Golang dependencies, powered by Sonatype OSS Index

[sayboras]

This tool didn't seems to implement go analysis, so it will be hard to integrate to golangci-lint. Moreover, I just have quick look on nancy repo, I don't think it's designed to use as library either.

I could be wrong though, let's wait for response from @golangci/core-team

[SVilgelm]

I think it's not a good idea, because Nancy does a lot of http requests, and it will be very very slow process. Of course the cache will reduce the wait time, but anyway it requires an internet connectivity, when all other linters work locally.

✅ I think it's a good idea to integrate the nancy tool into PR workflow for golangci-lint development process, but not as a linter