Try different gosec action

Author: DerAndereAndi

.github/workflows/default.yml

@@ -48,7 +48,7 @@ jobs:
           file: coverage.out
 
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@master
+        uses: securego/gosec@11d69032b0856c96afd4c493967ab7a30e20ff5e
         with:
           # we let the report trigger content trigger a failure using the GitHub Security features.
           args: '-no-fail -fmt sarif -out results.sarif ./...'