We are, and we're talking to them. In an ideal world we would have loved to have merged the databases.

I expect the two databases will move in sync. The GitHub advisory database is licensed as CC BY 4.0 (i.e., attribution only), so we actively encourage others, including the Go Vulnerability Database, to pull from it.