Merge pull request #888 from google/gosec-ignore-generated

ci: Ignore generated files in gosec scans.

.github/workflows/ci.yml

@@ -76,7 +76,7 @@ jobs:
       - uses: securego/gosec@master
         with:
           # we let the report trigger content trigger a failure using the GitHub Security features.
-          args: '-no-fail -fmt sarif -out results.sarif -tags fuzz ./...'
+          args: '-no-fail -exclude-generated -fmt sarif -out results.sarif -tags fuzz ./...'
       - uses: github/codeql-action/upload-sarif@v3
         with:
           # Path to SARIF file relative to the root of the repository