Fix securego/gosec GH Action (#88)

The error message is `Unable to resolve action `securego/gosec@v2`, unable to find version `v2``

.github/workflows/security.yml

@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Run GoSec Security Scanner
-        uses: securego/gosec@v2
+        uses: securego/gosec@master
         with:
           args: "-severity=medium -no-fail -fmt sarif -out gosec-results.sarif ./..."
 

internal/cmd/profile/login_command.go

@@ -216,7 +216,7 @@ func loginUsingWebBrowser(creds *session.StoredCredentials) error {
 	}
 
 	m := http.NewServeMux()
-	server := &http.Server{Addr: fmt.Sprintf(":%d", cliServerPort), Handler: m}
+	server := &http.Server{Addr: fmt.Sprintf(":%d", cliServerPort), Handler: m, ReadHeaderTimeout: 5 * time.Second}
 	m.HandleFunc("/", handler)
 
 	fmt.Printf("\nOpening browser to %s\n\n", browserURL)
@@ -269,7 +269,7 @@ func openWebBrowser(url string) error {
 		cmd = exec.Command("open", url)
 	case "windows":
 		r := strings.NewReplacer("&", "^&")
-		cmd = exec.Command("cmd", "/c", "start", r.Replace(url))
+		cmd = exec.Command("cmd", "/c", "start", r.Replace(url)) //#nosec
 	default:
 		return errors.New("unsupported platform")
 	}

internal/cmd/workerpools/worker.go

@@ -178,9 +178,9 @@ func (c *drainWorkerCommand) drainedWorkerIsIdle(cliCtx *cli.Context, workerID s
 
 	var workerToDrain *worker
 
-	for _, w := range query.WorkerPool.Workers {
+	for i, w := range query.WorkerPool.Workers {
 		if w.ID == workerID {
-			workerToDrain = &w
+			workerToDrain = &query.WorkerPool.Workers[i]
 			break
 		}
 	}