Update GitHub Actions workflows

- Pin to full -length commit hash
- Add master alongside main

.github/workflows/gosec.yml

@@ -1,13 +1,18 @@
 name: Run Gosec
+
 on:
   push:
     branches:
       - main
+      - master
   pull_request:
     branches:
       - main
+      - master
+
 permissions:
   contents: read
+
 jobs:
   tests:
     runs-on: ubuntu-latest
@@ -15,7 +20,7 @@ jobs:
       GO111MODULE: on
     steps:
       - name: Checkout Source
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Run Gosec Security Scanner
         uses: securego/gosec@master
         with: