ci: move semgrep to lint instead of security

Author: jippi

.github/workflows/lint.yml

@@ -68,3 +68,25 @@ jobs:
       - uses: github/codeql-action/autobuild@v3
 
       - uses: github/codeql-action/analyze@v3
+
+  # ------------------------------
+
+  semgrep:
+    runs-on: ubuntu-latest
+    name: semgrep
+    container:
+      image: returntocorp/semgrep
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/checkout@v4
+        with:
+          repository: dgryski/semgrep-go
+          path: rules
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: semgrep
+        run: semgrep scan --error --enable-nosem -f ./rules .

.github/workflows/security.yml

@@ -40,28 +40,6 @@ jobs:
 
   # ------------------------------
 
-  semgrep:
-    runs-on: ubuntu-latest
-    name: semgrep
-    container:
-      image: returntocorp/semgrep
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/checkout@v4
-        with:
-          repository: dgryski/semgrep-go
-          path: rules
-
-      - uses: actions/setup-go@v5
-        with:
-          go-version-file: go.mod
-
-      - name: semgrep
-        run: semgrep scan --error --enable-nosem -f ./rules .
-
-  # ------------------------------
-
   gitleaks:
     runs-on: ubuntu-latest
     name: gitleaks