fix: Update OpenVEX report to correctly reference OCI IDs #2092

	name: "[Informing] Check dependencies"
	on:
	push:
	branches:
	- main
	- release-*
	pull_request:
	branches:
	- main
	- release-*

	permissions: read-all

	jobs:
	check-deps:
	name: "Check dependencies"
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- name: Check out code into the Go module directory
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
	with:
	go-version: "1.23"
	check-latest: true
	- name: Check go.mod
	shell: bash
	run: \|
	# there should be no go.mod changes
	go mod tidy
	git diff --exit-code

Provide feedback