fix: lint private mod

.github/workflows/workflow.yaml

@@ -44,12 +44,17 @@ jobs:
       - name: Check out code into the Go module directory
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
+      - name: Download dependencies
+        run: |
+          export GOPRIVATE="github.com/docker/attest"
+          git config --global "url.https://x-access-token:${{ steps.app-token.outputs.token }}@github.com.insteadof" "https://github.com"
+          go mod download
+
       # source: https://github.com/golangci/golangci-lint-action
       - name: golangci-lint
         uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64 # v6.0.1
         with:
           version: v1.59
-          github-token: ${{ steps.app-token.outputs.token }}
 
   helm_build_test:
     name: "[Helm] Build and Test"