Add new gosec gh yaml file

[paologalligit]

Description

Add new workflow for gosec when creating PRs to master and when merging into master.

GH Issue

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• New and existing E2E tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules
• I have not added any vulnerable dependencies to my code

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 62.50000% with 3 lines in your changes missing coverage. Please review.

Project coverage is 62.51%. Comparing base (5bc66a8) to head (1556b1a).

Files with missing lines	Patch %	Lines
cache/rnd_cache.go	50.00%	1 Missing ⚠️
comm/peer.go	0.00%	1 Missing ⚠️
p2psrv/rpc/rpc.go	0.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #846   +/-   ##
=======================================
  Coverage   62.51%   62.51%           
=======================================
  Files         208      208           
  Lines       18872    18872           
=======================================
  Hits        11798    11798           
  Misses       5975     5975           
  Partials     1099     1099           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[otherview]

lgtm 👍

[otherview]

This is always running at the latest version of GoSec yeah ?

[paologalligit]

yes, that's also the suggest way to structure the job taken from the gosec page