fix vul (#49)

* fix vul

* Update go.mod

* Update Dockerfile

* Update go.mod

* Update Dockerfile

* update go mod tidy

Author: Giridharab

controller/Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM docker.io/library/golang:1.23.8-alpine3.20 as builder
+FROM docker.io/library/golang:1.24.4-alpine3.22 as builder
 ARG TARGETOS
 ARG TARGETARCH
 
@@ -23,7 +23,7 @@ COPY . .
 # was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
 # the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
 # by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
-RUN cd controller && CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -v -a -o manager cmd/main.go
+RUN cd controller && go mod tidy && CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -v -a -o manager cmd/main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details

controller/go.mod

@@ -1,6 +1,6 @@
 module github.com/cisco-open/synthetic-heart/controller
 
-go 1.22
+go 1.24.4
 
 require (
 	github.com/cisco-open/synthetic-heart/common v0.0.0-00010101000000-000000000000
@@ -63,8 +63,8 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.26.0 // indirect
 	golang.org/x/exp v0.0.0-20220722155223-a9213eeb770e // indirect
-	golang.org/x/net v0.25.0 // indirect
-	golang.org/x/oauth2 v0.20.0 // indirect
+	golang.org/x/net v0.38.0 // indirect
+	golang.org/x/oauth2 v0.27.0 // indirect
 	golang.org/x/sys v0.20.0 // indirect
 	golang.org/x/term v0.20.0 // indirect
 	golang.org/x/text v0.15.0 // indirect

restapi/Dockerfile

@@ -1,7 +1,7 @@
 ############################
 # STEP 1 build the image for creating the executable
 ############################
-FROM docker.io/library/golang:1.23.8-alpine3.20 as builder
+FROM docker.io/library/golang:1.24.4-alpine3.22 as builder
 
 # Install git + SSL ca certificates + make
 # Git is required for fetching the dependencies.
@@ -16,7 +16,7 @@ WORKDIR /app
 COPY . .
 
 # Compile the binary
-RUN cd restapi && make build-restapi
+RUN cd restapi && go mod tidy && make build-restapi
 
 ############################
 # STEP 2 build a small image with only the executable

restapi/go.mod

@@ -1,6 +1,6 @@
 module github.com/cisco-open/synthetic-heart/restapi
 
-go 1.23.1
+go 1.24.4
 
 require (
 	github.com/cisco-open/synthetic-heart/common v0.0.0-00010101000000-000000000000
@@ -28,7 +28,7 @@ require (
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/oklog/run v1.0.0 // indirect
-	golang.org/x/net v0.25.0 // indirect
+	golang.org/x/net v0.38.0 // indirect
 	golang.org/x/sys v0.20.0 // indirect
 	golang.org/x/text v0.15.0 // indirect
 	google.golang.org/genproto v0.0.0-20210402141018-6c239bbf2bb1 // indirect