chore: add semgrep rules

.github/workflows/golangci-lint.yaml

@@ -1,4 +1,4 @@
-name: Go
+name: golangci-lint
 
 on:
   push:

.github/workflows/semgrep.yaml

@@ -0,0 +1,20 @@
+name: semgrep
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  lint:
+    name: semgrep
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: returntocorp/semgrep-action@v1
+        with:
+          config: >-
+            p/golang