Merge pull request #125 from cwayne18/harden

Pin go install to specific commit

Author: cwayne18

Dockerfile

@@ -27,7 +27,7 @@ ARG TAG=""
 ARG PKG="github.com/rancher/image-build-rke2-cloud-provider"
 COPY . /$GOPATH/src/${PKG}
 WORKDIR $GOPATH/src/${PKG}
-RUN go install github.com/davidrjonas/semver-cli@1.1.1
+RUN go install github.com/davidrjonas/semver-cli@01c0227aa85e
 ENV GONOSUMDB=github.com/k3s-io/k3s GONOPROXY=github.com/k3s-io/k3s
 RUN ./scripts/modsync.sh ${TAG}
 RUN go mod download