Complete workflow fixes: Remove all nancy dependencies and add shell compatibility

Co-authored-by: morningstarxcdcode <205398826+morningstarxcdcode@users.noreply.github.com>

Author: Copilot

.github/workflows/automated-security.yml

@@ -152,7 +152,7 @@ jobs:
         echo "Generated: $(date)" >> dependency-security-report.md
         echo "" >> dependency-security-report.md
         echo "## Scan Results" >> dependency-security-report.md
-        echo "- Go vulnerabilities: Checked with govulncheck and nancy" >> dependency-security-report.md
+        echo "- Go vulnerabilities: Checked with govulncheck" >> dependency-security-report.md
         echo "- Rust vulnerabilities: Checked with cargo-audit" >> dependency-security-report.md
         echo "- JavaScript vulnerabilities: Checked with npm audit" >> dependency-security-report.md
         echo "- Python vulnerabilities: Checked with safety and bandit" >> dependency-security-report.md

.github/workflows/build-and-test.yml

@@ -308,7 +308,7 @@ jobs:
     - name: Setup tools
       run: |
         # Install security testing tools
-        go install github.com/securecodewarrior/nancy@latest
+        go install golang.org/x/vuln/cmd/govulncheck@latest
         cargo install cargo-audit
         pip install bandit safety
 
@@ -318,7 +318,7 @@ jobs:
         cargo audit
         
         # Go vulnerability check
-        go list -json -deps ./... | nancy sleuth
+        govulncheck ./...
         
         # Python security scan (if applicable)
         find . -name "*.py" -exec bandit {} \; || true

.github/workflows/comprehensive-testing.yml

@@ -13,6 +13,10 @@ permissions:
   pull-requests: write
   actions: read
 
+defaults:
+  run:
+    shell: bash
+
 env:
   CARGO_TERM_COLOR: always
   RUST_BACKTRACE: 1
@@ -86,6 +90,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Clear Rust caches
+      shell: bash
       run: |
         rm -rf ~/.cargo/registry
         rm -rf ~/.cargo/git
@@ -373,6 +378,7 @@ jobs:
     - name: Install security testing tools
       run: |
         go install github.com/securecodewarrior/gosec/v2/cmd/gosec@latest
+        go install golang.org/x/vuln/cmd/govulncheck@latest
         pip install bandit safety
 
     - name: Run Go security scan
@@ -388,7 +394,7 @@ jobs:
 
     - name: Run dependency vulnerability scan
       run: |
-        go list -json -deps ./... | nancy sleuth || true
+        govulncheck ./... || true
         safety check || true
 
     - name: Upload security scan results