* add security-scan workflow * remove uneeded branch; adopt .go-version * fix bad yaml * fix random newlines * add copy