Address new gosec lint failures

[oschwald]

For the checks that I added, I don't think we could actually hit any of them, but it is better to be safe than to produce a corrupt database.

[github-actions[bot]]

Modver result

This report was generated by Modver, a Go package and command that helps you obey semantic versioning rules in your Go module.

This PR does not require a change in your module’s version number. (You might still consider bumping the patchlevel anyway.)