chore: enable gosec

.golangci.yml

@@ -50,7 +50,6 @@ linters:
   - gocritic
   - forbidigo
   - dupl
-  - gosec
 
 linters-settings:
   tagliatelle:

internal/run/prom_push_gw_test.go

@@ -7,6 +7,7 @@ import (
 	"strings"
 	"sync"
 	"sync/atomic"
+	"time"
 
 	io_prometheus_client "github.com/prometheus/client_model/go"
 	"github.com/prometheus/common/expfmt"
@@ -84,7 +85,10 @@ func (f *FakePrometheus) ServeHTTP(response http.ResponseWriter, request *http.R
 
 func (f *FakePrometheus) StartServer() {
 	f.metricFamilies = sync.Map{}
-	f.server = &http.Server{Addr: fmt.Sprintf("localhost:%d", f.Port)}
+	f.server = &http.Server{
+		Addr:              fmt.Sprintf("localhost:%d", f.Port),
+		ReadHeaderTimeout: 1 * time.Second,
+	}
 	f.server.Handler = f
 	go func() {
 		if err := f.server.ListenAndServe(); err != nil {

internal/trigger/api/iteration_jitter.go

@@ -12,6 +12,7 @@ func WithJitter(rate RateFunction, multiple float64) RateFunction {
 		return rate
 	}
 	return func(now time.Time) int {
+		//nolint:gosec // G404: Use of weak random number generator - doesn't need to be secure
 		variationFactor := 1 + (math.Cos(rand.Float64()*2*math.Pi))*multiple/100
 		requestedRate := float64(rate(now)) + balance
 		proposed := requestedRate * variationFactor