Go detector overreports dependencies, sometimes causing false vuln claims that are unusually difficult to "upgrade anyway" #3194

	name: Sync issue to Azure DevOps work item

	on:
	workflow_dispatch:
	issues:
	types:
	[opened, edited, deleted, closed, reopened, labeled, unlabeled, assigned]
	issue_comment:
	types: [created, edited, deleted]

	permissions: {}

	jobs:
	alert:
	runs-on: ubuntu-latest
	permissions:
	issues: write
	steps:
	- uses: danhellem/github-actions-issue-to-work-item@e077ff031c704672afb932c8718370df12b90f08 # v2.3
	env:
	ado_token: "${{ secrets.ADO_ISSUE_SYNC_TOKEN }}" # Work items write permissions
	github_token: "${{ secrets.GITHUB_TOKEN }}"
	ado_organization: "mseng"
	ado_project: "AzureDevOps"
	ado_area_path: "AzureDevOps\\Artifacts\\Component Governance"
	ado_wit: "Task"
	ado_new_state: "Proposed"
	ado_active_state: "In Progress"
	ado_close_state: "Completed"

Provide feedback