[WIP] Update container image to resolve vulnerabilities

[Copilot]

• Investigate whether ghcr.io/github/gh-aw-mcpg vulnerabilities are fixable from this repo
• Determine remediation path (version bump vs. no-op)
• Finalize PR with findings

• Fixes [container-image-scan] Container findings for ghcr.io/github/gh-aw-mcpg #52456

[github-actions]

Hey @Copilot 👋 — thanks for working on resolving the container image vulnerabilities reported in #52456! This is an important security issue. Here are a few things to keep in mind as you finalize this:

• Complete the investigation — The PR is still in draft status with the investigation checklist incomplete. Make sure to finish determining whether the vulnerabilities are fixable from this repository and finalize the remediation path (version bump vs. no-op).
• Add actual changes — Once the investigation is complete, update the relevant dependency files (Dockerfile, go.mod, etc.) with the necessary version bumps for Go, golang.org/x/text, github.com/sigstore/fulcio, google.golang.org/grpc, github.com/opencontainers/runc, and any Alpine base packages as documented in [container-image-scan] Container findings for ghcr.io/github/gh-aw-mcpg #52456.
• Update PR description — Replace the checklist with a clear summary of what was changed and why, referencing the specific CVEs/vulnerabilities being addressed.
• Include tests — Add or update any container image build tests or validation to ensure the new versions work correctly.

The detailed remediation steps are already documented in #52456, so you have a clear path forward. Looking forward to seeing this merged!

Generated by ✅ Contribution Check · auto · 51.6 AIC · ⌖ 3.35 AIC · ⊞ 8.8K · ◷

[github-actions]

Triage: chore / risk: low

Score: 13/100 (impact+urgency+quality) · Priority: low · Action: defer

DRAFT/WIP checklist PR investigating gh-aw-mcpg container vulnerabilities. 0 diff yet — no actionable content to review.

_{Automated PR triage — see full report issue for details.}

Generated by 🔧 PR Triage Agent · auto · 48.2 AIC · ⌖ 2.57 AIC · ⊞ 7.8K · ◷