[#patch] fix for private repos (#301)

Author: notdodo

.github/workflows/go-ci.yml

@@ -77,6 +77,7 @@ jobs:
           allowed-endpoints: >
             api.github.com:443
             github.com:443
+            go.dev:443
             objects.githubusercontent.com:443
             proxy.golang.org:443
             release-assets.githubusercontent.com:443
@@ -113,6 +114,7 @@ jobs:
           allowed-endpoints: >
             api.github.com:443
             github.com:443
+            go.dev:443
             objects.githubusercontent.com:443
             proxy.golang.org:443
             release-assets.githubusercontent.com:443

.github/workflows/sast.yml

@@ -30,7 +30,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: 'Dependency Review'
-        if: github.event_name == 'pull_request'
+        if: github.event_name == 'pull_request' && inputs.upload-sarif
         uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
         with:
           fail-on-severity: moderate