Bump securego/gosec from 2.28.0 to 2.29.0 (#637)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.28.0 to 2.29.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](securego/gosec@9e75c05...deb5446)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alexey Kiselev <alexey.kiselev@gmail.com>

Author: dependabot[bot]

.github/workflows/security.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Checkout Source
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
       - name: Run gosec security scanner
-        uses: securego/gosec@9e75c0576c9878035d4221392108d458abe10fc3 # v2.28.0
+        uses: securego/gosec@deb54465fea23d19a77f037e11e6589021f8501d # v2.29.0
         with:
           # with '-no-fail' we let the report trigger content trigger a failure using the GitHub Security features.
           args: "-no-fail -fmt sarif -out gosec.sarif ./..."