fix(gosec): annotate non-crypto math/rand uses with //nosec G404

Author: libotony

comm/peer.go

@@ -180,7 +180,7 @@ func (ps *PeerSet) Slice() Peers {
 	defer ps.lock.Unlock()
 
 	ret := make(Peers, len(ps.m))
-	perm := rand.Perm(len(ps.m))
+	perm := rand.Perm(len(ps.m)) //nosec G404 -- non-crypto shuffle for peer ordering
 	i := 0
 	for _, s := range ps.m {
 		// randomly

p2p/discv5/ticket.go

@@ -549,7 +549,7 @@ func (s *ticketStore) addTicket(localTime mclock.AbsTime, pingHash []byte, ticke
 
 	if _, ok := s.tickets[topic]; ok {
 		wait := ticket.regTime[topicIdx] - localTime
-		rnd := rand.ExpFloat64()
+		rnd := rand.ExpFloat64() //nosec G404 -- non-crypto jitter for ticket registration wait
 		rnd = min(rnd, 10)
 		if float64(wait) < float64(keepTicketConst)+float64(keepTicketExp)*rnd {
 			// use the ticket to register this topic

p2p/discv5/topic.go

@@ -354,7 +354,7 @@ func (w *waitControlLoop) hasMinimumWaitPeriod() bool {
 }
 
 func noRegTimeout() time.Duration {
-	e := rand.ExpFloat64()
+	e := rand.ExpFloat64() //nosec G404 -- non-crypto jitter for registration timeout
 	e = min(e, 100)
 	return time.Duration(float64(avgnoRegTimeout) * e)
 }