Private Dependencies

[elgohr]

The example mentions the use of GOPRIVATE, so I was hopeful that this action would be able to work with private dependencies.
In this way I scanned a private repository (using GOPRIVATE, for private dependencies).
In addition I added -run: git config --global url.git@github.com:.insteadOf https://github.com/ as a step before the action.
Nevertheless, it fails - as the token, that is used in context of checkout is limited to the repository it checked out - no other private repository.
I'm also vendoring dependencies in my repository, sadly this action uses go mod graph (which doesn't respect vendoring).
Would be great to see an example that uses private dependencies.