Updating Go modules from 1.21 to 1.24, updated scorecard analysis upoad artifact version

Signed-off-by: Lucas Yoon <[email protected]>

Author: Lucas Yoon

.ci/Dockerfile

@@ -12,7 +12,7 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-FROM golang:1.21-alpine@sha256:2a1959ca3c229c72fbbee9643b88ef23d7859a7d18b60a0d94ee3d2923b49316 AS builder
+FROM golang:1.24-alpine@sha256:daae04ebad0c21149979cd8e9db38f565ecefd8547cf4a591240dc1972cf1399 AS builder
 
 # Allows for the proper yq to be downloaded
 # This arg is automatically set if the dockerfile is built with --platform flag

.github/workflows/ci.yaml

@@ -21,7 +21,7 @@ on:
     branches: [main]
 
 env:
-  GO_VERSION: 1.21
+  GO_VERSION: 1.24
   OAPI_CODEGEN_VERSION: v1.12.4
 
 jobs:
@@ -62,7 +62,7 @@ jobs:
       - name: Run Gosec Security Scanner
         run: |
           export PATH=$PATH:$(go env GOPATH)/bin
-          go install github.com/securego/gosec/v2/cmd/gosec@v2.14.0
+          go install github.com/securego/gosec/v2/cmd/gosec@v2.22.7
           bash ./run_gosec.sh
           if [[ $? != 0 ]]
           then

.github/workflows/codecov.yaml

@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
-          go-version: 1.21
+          go-version: 1.24
       - name: Run tests
         run: cd index/server && go test ./... -coverprofile cover.out
       - name: Codecov

.github/workflows/pushimage-next.yaml

@@ -30,7 +30,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
-          go-version: 1.21
+          go-version: 1.24
       - name: Set up QEMU # Enables arm64 image building
         uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 #v3.0.0
       - name: Login to Quay

.github/workflows/scorecard.yaml

@@ -45,7 +45,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.1.0
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: SARIF file
           path: results.sarif

README.md

@@ -2,7 +2,7 @@
 
 <div id="header">
 
-![Go](https://img.shields.io/badge/Go-1.21-blue)
+![Go](https://img.shields.io/badge/Go-1.24-blue)
 [![Apache2.0 License](https://img.shields.io/badge/license-Apache2.0-brightgreen.svg)](LICENSE)
 [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/8257/badge)](https://www.bestpractices.dev/projects/8257)
 [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/devfile/registry-support/badge)](https://securityscorecards.dev/viewer/?uri=github.com/devfile/registry-support)

index/generator/go.mod

@@ -1,6 +1,6 @@
 module github.com/devfile/registry-support/index/generator
 
-go 1.21
+go 1.24
 
 require (
 	github.com/devfile/api/v2 v2.3.0

index/server/Dockerfile

@@ -14,7 +14,7 @@
 # limitations under the License.
 
 # Index Server build stage
-FROM registry.access.redhat.com/ubi8/go-toolset:1.21.13-1.1727869850 AS index-builder
+FROM registry.access.redhat.com/ubi8/go-toolset:1.24.4-1754273152@sha256:ddad134f9fe193a6b3c7a87fa73b17e80212cdb0aa10dbd5a7581df96c998f1b AS index-builder
 USER root
 WORKDIR /tools
 COPY . .

index/server/go.mod

@@ -1,6 +1,6 @@
 module github.com/devfile/registry-support/index/server
 
-go 1.21
+go 1.24
 
 require (
 	github.com/deepmap/oapi-codegen v1.12.4

oci-registry/Dockerfile

@@ -12,7 +12,7 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-FROM registry.access.redhat.com/ubi8/go-toolset:1.23.6-1.1744600118 as registry
+FROM registry.access.redhat.com/ubi8/go-toolset:1.24.4-1754273152@sha256:ddad134f9fe193a6b3c7a87fa73b17e80212cdb0aa10dbd5a7581df96c998f1b as registry
 ARG PKG="github.com/docker/distribution"
 ARG PKG_VERSION="v2.8.3"
 ENV GOPATH=/go