fix: ruleguard and semgrep scans and fixes

[caarlos0]

run semgrep-go ruleguard and semgrep scans

https://github.com/dgryski/semgrep-go

[codecov]

Codecov Report

Merging #3364 (487d4af) into main (5185b5b) will decrease coverage by 0.01%.
The diff coverage is 76.92%.

@@            Coverage Diff             @@
##             main    #3364      +/-   ##
==========================================
- Coverage   83.90%   83.89%   -0.02%     
==========================================
  Files         115      115              
  Lines        9215     9208       -7     
==========================================
- Hits         7732     7725       -7     
  Misses       1206     1206              
  Partials      277      277              

Impacted Files	Coverage Δ
internal/pipe/aur/aur.go	80.15% <0.00%> (ø)
internal/pipe/release/release.go	91.36% <0.00%> (ø)
internal/pipe/blob/upload.go	74.84% <66.66%> (-0.62%)	⬇️
cmd/config.go	100.00% <100.00%> (ø)
internal/exec/exec_mock.go	9.52% <100.00%> (ø)
internal/git/config.go	90.56% <100.00%> (ø)
internal/pipe/archive/archive.go	93.83% <100.00%> (ø)
internal/pipe/env/env.go	97.14% <100.00%> (ø)
internal/testlib/git.go	100.00% <100.00%> (ø)
pkg/context/context.go	100.00% <100.00%> (ø)
... and 1 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.