ci: re-enable List vulnerable packages (#4756)

Author: Flash0ver

.github/workflows/vulnerabilities.yml

@@ -2,10 +2,9 @@ name: List vulnerable packages
 
 on:
   workflow_dispatch:
-  # Currently broken on .net 8, see https://github.com/NuGet/Home/issues/12954
-  # schedule:
-  #   - cron: "0 0 * * *" # once a day
-  # pull_request:
+  schedule:
+    - cron: "0 0 * * *" # once a day
+  pull_request:
 
 jobs:
   list-vulnerable-packages:
@@ -26,11 +25,11 @@ jobs:
       - name: Restore .NET Dependencies
         run: dotnet restore Sentry.sln --nologo
 
-      # The dotnet list package command doesn't change its exit code on detection, so tee to a file and scan it
+      # The dotnet package list command doesn't change its exit code on detection, so tee to a file and scan it
       # See https://github.com/NuGet/Home/issues/11315#issuecomment-1243055173
       - name: List vulnerable packages
         shell: bash
         run: |
-          dotnet list ${{ github.workspace }}/Sentry.sln package --vulnerable --include-transitive | tee vulnerable.txt
+          dotnet package list --project Sentry.sln --vulnerable --include-transitive --no-restore | tee vulnerable.txt
           # https://github.com/getsentry/sentry-dotnet/issues/2814
           # ! grep 'has the following vulnerable packages' vulnerable.txt