Run gosec

.gitea/workflows/test.yaml

@@ -1,12 +1,15 @@
-name: test
+name: Test
 
 on:
   push:
     branches:
       - main
+  pull_request:
+    branches:
+      - main
 
 jobs:
-  test-default:
+  tests:
     runs-on: ubuntu-latest
     container:
       image: gitea/runner-images:ubuntu-latest
@@ -77,4 +80,5 @@ jobs:
           if [ -f vault.pid ]; then
             kill $(cat vault.pid) 2>/dev/null || true
             rm -f vault.pid
-          fi
+          fi
+