Vulnerabilities discovered in Go version used

[YawningCobra8]

webhook-vulns.txt

See attached output of scan. Using the Prisma Compute (formally Twistlock) scan engine, lots of vulnerabilities exist within the current version of Go used for Webhook.

Not all of this would be exploitable within this tool (ie. I'd be stunned if there was a way to invoke the exploit of the Curve.IsOnCurve vuln, for instance), however some may be, and it would be good hygiene to lift Go to a higher version to remediate these.

Moving the project to Go 1.18.1 would pull in fixes for all listed.

[YawningCobra8]

This can be remediated by building on later version, was using minimum required. Still a good idea to bump the minimum though.