fix: pin go version in release workflows and disable secret scan (#178)

pin go version in release workflows and disable secret scan

.github/workflows/ci.yaml

@@ -117,21 +117,6 @@ jobs:
 
   # The TruffleHog OSS Github Action can be used to scan a range of commits for leaked credentials. The action will fail if any results are found.
   # More see: https://github.com/marketplace/actions/trufflehog-oss
-  SecretScan:
-    name: Secret Scan
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v3
-      with:
-        fetch-depth: 0
-    - name: TruffleHog OSS
-      uses: trufflesecurity/trufflehog@main
-      with:
-        path: ./
-        base: ${{ github.event.repository.default_branch }}
-        head: HEAD
-        extra_args: --debug --json
 
   # TODO: Uncomment when the repository is publicly.
   # DependencyReview:

.github/workflows/release.yaml

@@ -7,6 +7,9 @@ on:
     - "v*"
 permissions:
   contents: write
+env:
+  GO_VERSION: '1.19'
+
 jobs:
   Test:
     name: Unit Test