Better SCA for cgo projects

Found the bot account.

Yes, let’s keep cgo projects maximally insecure.