ci: bump securego/gosec from 2.21.4 to 2.23.0

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.21.4 to 2.23.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](securego/gosec@d4617f5...398ad54)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/security.yml

@@ -51,7 +51,7 @@ jobs:
       - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4
 
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@d4617f51baf75f4f809066386a4f9d27b3ac3e46 # v2.21.4
+        uses: securego/gosec@398ad549bbf1a51dc978fd966169f660c59774de # v2.23.0
         with:
           args: '-no-fail -fmt sarif -out results.sarif ./...'