fix: zip slip vulnerability

[shipengqi]

Thank you for contributing to golib!

Please add a summary of your change

fix: zip slip vulnerability

Does your change fix a particular issue?

Fixes #(issue)
#31
https://github.com/shipengqi/golib/security/code-scanning/1

Check list:

• Mark if documentation changes are required.
• Mark if tests were added or updated to cover the changes.

[codecov-commenter]

Codecov Report

Merging #28 (4ee6f09) into main (31c6f42) will decrease coverage by 0.15%.
The diff coverage is 0.00%.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@            Coverage Diff             @@
##             main      #28      +/-   ##
==========================================
- Coverage   71.65%   71.50%   -0.15%     
==========================================
  Files          22       22              
  Lines         956      958       +2     
==========================================
  Hits          685      685              
- Misses        197      198       +1     
- Partials       74       75       +1     

Flag	Coverage Δ
unittests	71.50% <0.00%> (-0.15%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Changed	Coverage Δ
fsutil/tar.go	51.61% <0.00%> (-1.14%)	⬇️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.