Merge pull request #1708 from zhanggbj/master

Bump trivy and go version for security scan and fix

Author: zhanggbj

Makefile

@@ -36,7 +36,7 @@ GO_VERSION ?= 1.25.8
 
 # Binaries
 GO_INSTALL := ./hack/go-install.sh
-TRIVY_VER := 0.49.1
+TRIVY_VER := 0.69.2
 GOVULNCHECK_BIN := govulncheck
 GOVULNCHECK_VER := v1.1.4
 GOVULNCHECK := $(abspath $(TOOLS_BIN_DIR)/$(GOVULNCHECK_BIN)-$(GOVULNCHECK_VER))

cluster/images/controller-manager/Dockerfile

@@ -14,7 +14,7 @@
 ##                               BUILD ARGS                                   ##
 ################################################################################
 # This build arg allows the specification of a custom Golang image.
-ARG GOLANG_IMAGE=golang:1.25.0
+ARG GOLANG_IMAGE=golang:1.25.8
 
 # The distroless image on which the CPI manager image is built.
 ARG DISTROLESS_IMAGE=gcr.io/distroless/static-debian11:latest