security push

- addressing gosec issues
- adding workflow docs
- go version bump

cryptography/aes.go

@@ -21,7 +21,10 @@ func EncryptPassword(b []byte) ([]byte, error) {
 		return nil, err
 	}
 
-	ct := aesg.Seal(nil, []byte(nonce), []byte(b), nil)
+	//adding #nosec here since gosec interprets this as a hardcoded nonce when in reality it is securely generated
+	//using crypto/rand when running the config command. Here is is pulled from memory and is not a hardcoded nonce
+	//as gosec thinks, will remove this skip once the issue is addressed from gosec
+	ct := aesg.Seal(nil, []byte(nonce), []byte(b), nil) // #nosec
 	return ct, nil
 }