Bump securego/gosec from 2.9.5 to 2.9.6

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.9.5 to 2.9.6.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@v2.9.5...v2.9.6)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/gosec.yml

@@ -13,6 +13,6 @@ jobs:
       - name: Checkout Source
         uses: actions/checkout@v2
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@v2.9.5
+        uses: securego/gosec@v2.9.6
         with:
           args: -exclude-dir=pkg/promql -exclude-dir=pkg/prompb ./...