Reduce the number of vulnerabilities

[RothAndrew]

As a user of Build Harness that works in a secure environment, I want BH to have fewer vulnerabilities than it has now, so that my environment may be more secure.

As a user of Build Harness that works in a regulated environment, I want vulnerability scanners like Grype to report that Build Harness has fewer CVEs than it does now, so that I can use it without having to justify so many vulnerabilities in my compliance paperwork.

Acceptance Criteria

Beta Give feedback

1. The Grype report of BH reports fewer vulnerabilities than it has now
2. [Nice to have] The Grype report of BH reports zero criticals
3. [Stretch Goal, Optional] The Grype report reports zero highs

Notes:

• A recent scan of Build Harness showed 1 critical, 65 high, 249 medium, and 160 low CVEs
• A likely avenue for being able to do this without making big sweeping changes is to evaluate whether there are any tools that are reporting CVEs that are not absolutely required and can be subject to removal from the image.