Vulnerabilities because of older Alpine base image

[rajrohanyadav]

Hi maintainers,

Hope you are doing good.

Would you be able to take a look at #712 which has failed to auto-merge and causing a few (1 CRITICAL and 2 HIGH) vulnerabilities in the docker image? It'd be great if you could investigate and fix the build, so that the bump can be merged.

Thanks,
Rohan

[rajrohanyadav]

Hi @MovieStoreGuy @tiedotguy

Sorry for the ping, but if you could take a look at this, it would be really helpful.

Thankyou

[davidgit]

Hi @akavatl or @hstan ,

Could you help us here?

Thanks in advance

[hstan]

@davidgit
Merged #735

[rahulreddy15]

Hey @hstan ,
There is also a critical security vulnerability in the bin/gostatsd binary ( CVE-2024-24790 ) which will be resolved by bumping the go version.
Attaching the trivy report for you to see.

altassian-gostatsd.txt

[rahulreddy15]

Hey @hstan
Linking the PR that upgrades golang and golang.org/x/net versions

#736

[rahulreddy15]

Hey @hstan
The workflow seems to have failed because I did not run go mod tidy after upgrading golang.org/x/net.
Ran this and updated the PR. The upgraded libraries also appear in go.sum now.