Introduce gosec for Static Application Security Testing (SAST)

[rishabh-11]

trafficstars

How to categorize this issue?

/area compliance /area security /kind enhancement /priority 1

What would you like to be added: use gosec for SAST. Check https://github.com/gardener/gardener/pull/9959 for reference.

• [ ] mcm
• [ ] mcm-provider-aws
• [ ] mcm-provider-azure
• [ ] mcm-provider-gcp
• [ ] mcm-provider-openstack

Why is this needed: Please look at the mail from Claudia with the title Enable security linting in your repository by end of 2024 for details.