gosec/vendor.conf