govulncheck is a static code analyzer that scans more deeply than Snyk. Additionally, because govulncheck checks the code itself, it can rule out vulnerabilities that are present in dependencies but that are not used in Rook's code path. Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>