workflow updates

.gitea/workflows/security.yaml

@@ -8,8 +8,13 @@ jobs:
       - name: "clone code"
         uses: actions/checkout@v4
 
+      - name: "static code analysis"
+        uses: securego/gosec@v2.22.3
+        with:
+          args: ./...
+      
       - name: "install go"
-        uses: https://code.jakeyoungdev.com/actions/install-go@master
+        uses: https://code.jakeyoungdev.com/actions/install-go@v0.1.3
         with:
             commands: |
                 golang.org/x/vuln/cmd/govulncheck@latest
@@ -18,8 +23,3 @@ jobs:
         uses: https://code.jakeyoungdev.com/actions/report-vulns@master
         with:
           manager: go
-    
-      - name: "static code analysis"
-        uses: securego/gosec@v2.22.3
-        with:
-          args: ./...