chore: fix dependabot alerts (#2208)

https://github.com/project-zot/zot/pull/2192 https://github.com/project-zot/zot/pull/2193 https://github.com/project-zot/zot/pull/2194 https://github.com/project-zot/zot/pull/2195 https://github.com/project-zot/zot/pull/2196 https://github.com/project-zot/zot/pull/2197 https://github.com/project-zot/zot/pull/2198 https://github.com/project-zot/zot/pull/2199 https://github.com/project-zot/zot/pull/2200 https://github.com/project-zot/zot/pull/2201 https://github.com/project-zot/zot/pull/2202 https://github.com/project-zot/zot/pull/2203 https://github.com/project-zot/zot/pull/2204 https://github.com/project-zot/zot/pull/2205 https://github.com/project-zot/zot/pull/2206 https://github.com/project-zot/zot/pull/2207 Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
2024-12-16 21:56:37 -05:00 · 2024-01-29 15:30:41 -08:00 · 2024-01-29 15:30:41 -08:00 · 580df421bf
commit 580df421bf
parent 9def35f3b8
12 changed files with 247 additions and 421 deletions
--- a/.github/workflows/benchmark.yaml
+++ b/.github/workflows/benchmark.yaml
@ -24,7 +24,7 @@ jobs:
        run: make BENCH_OUTPUT=ci-cd run-bench
      # Download previous benchmark result from cache (if exists)
      - name: Download previous benchmark data
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: ./cache
          key: ${{ runner.os }}-gen1-benchmark
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@ -33,7 +33,7 @@ jobs:
          go-version: 1.20.x
      - name: Cache go dependencies
        id: cache-go-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: |
            ~/go/pkg/mod
@ -42,7 +42,7 @@ jobs:
            ${{ runner.os }}-go-mod-
      - name: Cache go build output
        id: cache-go-build
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: |
            ~/.cache/go-build
--- a/.github/workflows/cluster.yaml
+++ b/.github/workflows/cluster.yaml
@ -160,7 +160,7 @@ jobs:

      # Download previous benchmark result from cache (if exists)
      - name: Download previous benchmark data
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: ./cache
          key: ${{ runner.os }}-gen1-benchmark-stateless-cluster
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@ -53,7 +53,7 @@ jobs:

    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2.22.9
+      uses: github/codeql-action/init@v3.23.2
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@ -64,7 +64,7 @@ jobs:
    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    # If this step fails, then you should remove it and run the build manually (see below)
    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2.22.9
+      uses: github/codeql-action/autobuild@v3.23.2

    # ℹ️ Command-line programs to run using the OS shell.
    # 📚 https://git.io/JvXDl
@ -77,4 +77,4 @@ jobs:
    #   make release

    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2.22.9
+      uses: github/codeql-action/analyze@v3.23.2
--- a/.github/workflows/oci-conformance-action.yaml
+++ b/.github/workflows/oci-conformance-action.yaml
@ -59,7 +59,7 @@ jobs:
    - run: mkdir -p .out/ && mv {report.html,junit.xml} .out/
      if: always()
    - name: Upload test results zip as build artifact
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
      with:
        name: oci-test-results-${{ github.sha }}
        path: .out/
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@ -215,7 +215,7 @@ jobs:
          TRIVY_USERNAME: ${{ github.actor }}
          TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2.22.9
+        uses: github/codeql-action/upload-sarif@v3.23.2
        with:
          sarif_file: 'trivy-results.sarif'

--- a/.github/workflows/scorecards.yaml
+++ b/.github/workflows/scorecards.yaml
@ -49,7 +49,7 @@ jobs:
      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
      # format to the repository Actions tab.
      - name: "Upload artifact"
-        uses: actions/upload-artifact@v3 # v3.0.0
+        uses: actions/upload-artifact@v4 # v3.0.0
        with:
          name: SARIF file
          path: results.sarif
@ -57,6 +57,6 @@ jobs:

      # Upload the results to GitHub's code scanning dashboard.
      - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@v2.22.9 # v1.0.26
+        uses: github/codeql-action/upload-sarif@v3.23.2 # v1.0.26
        with:
          sarif_file: results.sarif
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@ -24,7 +24,7 @@ jobs:
          go-version: 1.20.x
      - name: Cache go dependencies
        id: cache-go-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: |
            ~/go/pkg/mod
@ -47,7 +47,7 @@ jobs:
          AWS_ACCESS_KEY_ID: fake
          AWS_SECRET_ACCESS_KEY: fake
      - name: upload coverage
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
        with:
          name: coverage-minimal
          path: coverage-minimal.txt
@ -63,7 +63,7 @@ jobs:
          go-version: 1.20.x
      - name: Cache go dependencies
        id: cache-go-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: |
            ~/go/pkg/mod
@ -86,7 +86,7 @@ jobs:
          AWS_ACCESS_KEY_ID: fake
          AWS_SECRET_ACCESS_KEY: fake
      - name: upload coverage
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
        with:
          name: coverage-extended
          path: coverage-extended.txt
@ -102,7 +102,7 @@ jobs:
          go-version: 1.20.x
      - name: Cache go dependencies
        id: cache-go-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: |
            ~/go/pkg/mod
@ -119,7 +119,7 @@ jobs:
      - name: run zot privileged tests
        run: sudo env "PATH=$PATH" make privileged-test
      - name: upload coverage
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
        with:
          name: coverage-devmode
          path: coverage-dev-*.txt
@ -135,7 +135,7 @@ jobs:
          cache: false
          go-version: 1.20.x
      - name: download all workflow coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
      - name: merge code coverage
        run: |
          cd $GITHUB_WORKSPACE
--- a/.github/workflows/web-scan.yaml
+++ b/.github/workflows/web-scan.yaml
@ -56,7 +56,7 @@ jobs:
        env:
          FLAVOR: ${{ matrix.flavor }}
      - name: ZAP Scan Rest API
-        uses: zaproxy/action-baseline@v0.10.0
+        uses: zaproxy/action-baseline@v0.11.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          docker_name: 'owasp/zap2docker-stable'
--- a/THIRD-PARTY-LICENSES.md
+++ b/THIRD-PARTY-LICENSES.md
@ -1,9 +1,10 @@
 Module | License URL | License
 ---|---|---
+
 cloud.google.com/go/compute/metadata|https://github.com/googleapis/google-cloud-go/blob/compute/metadata/v0.2.3/compute/metadata/LICENSE|Apache-2.0
 cloud.google.com/go/iam|https://github.com/googleapis/google-cloud-go/blob/iam/v1.1.5/iam/LICENSE|Apache-2.0
 cloud.google.com/go/internal|https://github.com/googleapis/google-cloud-go/blob/v0.110.10/LICENSE|Apache-2.0
-cloud.google.com/go/storage|https://github.com/googleapis/google-cloud-go/blob/storage/v1.33.0/storage/LICENSE|Apache-2.0
+cloud.google.com/go/storage|https://github.com/googleapis/google-cloud-go/blob/storage/v1.35.1/storage/LICENSE|Apache-2.0
 cloud.google.com/go|https://github.com/googleapis/google-cloud-go/blob/v0.110.10/LICENSE|Apache-2.0
 dario.cat/mergo|https://github.com/imdario/mergo/blob/v1.0.0/LICENSE|BSD-3-Clause
 filippo.io/edwards25519|https://github.com/FiloSottile/edwards25519/blob/v1.0.0/LICENSE|BSD-3-Clause
@ -52,6 +53,7 @@ github.com/aliyun/credentials-go/credentials|https://github.com/aliyun/credentia
 github.com/aliyun/credentials-go|https://github.com/aliyun/credentials-go/blob/v1.3.1/LICENSE|Apache-2.0
 github.com/anchore/go-struct-converter|https://github.com/anchore/go-struct-converter/blob/c68fdcfa2092/LICENSE|Apache-2.0
 github.com/apparentlymart/go-textseg/v13/textseg|https://github.com/apparentlymart/go-textseg/blob/v13.0.0/LICENSE|MIT
+github.com/apparentlymart/go-textseg/v15/textseg|https://github.com/apparentlymart/go-textseg/blob/v15.0.0/LICENSE|MIT
 github.com/aquasecurity/go-gem-version|https://github.com/aquasecurity/go-gem-version/blob/8eed6fe000ce/LICENSE|Apache-2.0
 github.com/aquasecurity/go-pep440-version|https://github.com/aquasecurity/go-pep440-version/blob/22b2f8951d46/LICENSE|Apache-2.0
 github.com/aquasecurity/go-version/pkg/part|https://github.com/aquasecurity/go-version/blob/637058cfe492/LICENSE|Apache-2.0
@ -59,35 +61,35 @@ github.com/aquasecurity/table|https://github.com/aquasecurity/table/blob/v1.8.0/
 github.com/aquasecurity/tml|https://github.com/aquasecurity/tml/blob/v0.6.1/LICENSE|Unlicense
 github.com/asaskevich/govalidator|https://github.com/asaskevich/govalidator/blob/a9d515a09cc2/LICENSE|MIT
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream|https://github.com/aws/aws-sdk-go-v2/blob/aws/protocol/eventstream/v1.4.14/aws/protocol/eventstream/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/config|https://github.com/aws/aws-sdk-go-v2/blob/config/v1.25.11/config/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/credentials|https://github.com/aws/aws-sdk-go-v2/blob/credentials/v1.16.9/credentials/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/config|https://github.com/aws/aws-sdk-go-v2/blob/config/v1.26.6/config/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/credentials|https://github.com/aws/aws-sdk-go-v2/blob/credentials/v1.16.16/credentials/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue|https://github.com/aws/aws-sdk-go-v2/blob/feature/dynamodb/attributevalue/v1.12.12/feature/dynamodb/attributevalue/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/feature/ec2/imds|https://github.com/aws/aws-sdk-go-v2/blob/feature/ec2/imds/v1.14.9/feature/ec2/imds/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds|https://github.com/aws/aws-sdk-go-v2/blob/feature/ec2/imds/v1.14.11/feature/ec2/imds/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/feature/s3/manager|https://github.com/aws/aws-sdk-go-v2/blob/feature/s3/manager/v1.11.90/feature/s3/manager/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/internal/configsources|https://github.com/aws/aws-sdk-go-v2/blob/internal/configsources/v1.2.9/internal/configsources/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2|https://github.com/aws/aws-sdk-go-v2/blob/internal/endpoints/v2.5.9/internal/endpoints/v2/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/internal/ini|https://github.com/aws/aws-sdk-go-v2/blob/internal/ini/v1.7.1/internal/ini/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/internal/sync/singleflight|https://github.com/aws/aws-sdk-go-v2/blob/v1.24.0/internal/sync/singleflight/LICENSE|BSD-3-Clause
+github.com/aws/aws-sdk-go-v2/internal/configsources|https://github.com/aws/aws-sdk-go-v2/blob/internal/configsources/v1.2.10/internal/configsources/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2|https://github.com/aws/aws-sdk-go-v2/blob/internal/endpoints/v2.5.10/internal/endpoints/v2/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/internal/ini|https://github.com/aws/aws-sdk-go-v2/blob/internal/ini/v1.7.3/internal/ini/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/internal/sync/singleflight|https://github.com/aws/aws-sdk-go-v2/blob/v1.24.1/internal/sync/singleflight/LICENSE|BSD-3-Clause
 github.com/aws/aws-sdk-go-v2/internal/v4a|https://github.com/aws/aws-sdk-go-v2/blob/internal/v4a/v1.1.6/internal/v4a/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/dynamodb/types|https://github.com/aws/aws-sdk-go-v2/blob/service/dynamodb/v1.26.6/service/dynamodb/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/dynamodbstreams/types|https://github.com/aws/aws-sdk-go-v2/blob/service/dynamodbstreams/v1.18.5/service/dynamodbstreams/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/dynamodbstreams|https://github.com/aws/aws-sdk-go-v2/blob/service/dynamodbstreams/v1.18.5/service/dynamodbstreams/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/dynamodb|https://github.com/aws/aws-sdk-go-v2/blob/service/dynamodb/v1.26.6/service/dynamodb/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/ebs|https://github.com/aws/aws-sdk-go-v2/blob/service/ebs/v1.18.1/service/ebs/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/ec2|https://github.com/aws/aws-sdk-go-v2/blob/service/ec2/v1.98.0/service/ec2/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/ec2|https://github.com/aws/aws-sdk-go-v2/blob/service/ec2/v1.134.0/service/ec2/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/ecrpublic|https://github.com/aws/aws-sdk-go-v2/blob/service/ecrpublic/v1.18.2/service/ecrpublic/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/ecr|https://github.com/aws/aws-sdk-go-v2/blob/service/ecr/v1.21.0/service/ecr/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/ecr|https://github.com/aws/aws-sdk-go-v2/blob/service/ecr/v1.24.1/service/ecr/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding|https://github.com/aws/aws-sdk-go-v2/blob/service/internal/accept-encoding/v1.10.4/service/internal/accept-encoding/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/internal/checksum|https://github.com/aws/aws-sdk-go-v2/blob/service/internal/checksum/v1.1.38/service/internal/checksum/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery|https://github.com/aws/aws-sdk-go-v2/blob/service/internal/endpoint-discovery/v1.8.10/service/internal/endpoint-discovery/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url|https://github.com/aws/aws-sdk-go-v2/blob/service/internal/presigned-url/v1.10.8/service/internal/presigned-url/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url|https://github.com/aws/aws-sdk-go-v2/blob/service/internal/presigned-url/v1.10.10/service/internal/presigned-url/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared|https://github.com/aws/aws-sdk-go-v2/blob/service/internal/s3shared/v1.15.6/service/internal/s3shared/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go-v2/service/s3|https://github.com/aws/aws-sdk-go-v2/blob/service/s3/v1.40.2/service/s3/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/secretsmanager|https://github.com/aws/aws-sdk-go-v2/blob/service/secretsmanager/v1.25.2/service/secretsmanager/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/ssooidc|https://github.com/aws/aws-sdk-go-v2/blob/service/ssooidc/v1.21.2/service/ssooidc/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/sso|https://github.com/aws/aws-sdk-go-v2/blob/service/sso/v1.18.2/service/sso/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2/service/sts|https://github.com/aws/aws-sdk-go-v2/blob/service/sts/v1.26.2/service/sts/LICENSE.txt|Apache-2.0
-github.com/aws/aws-sdk-go-v2|https://github.com/aws/aws-sdk-go-v2/blob/v1.24.0/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/secretsmanager|https://github.com/aws/aws-sdk-go-v2/blob/service/secretsmanager/v1.26.2/service/secretsmanager/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/ssooidc|https://github.com/aws/aws-sdk-go-v2/blob/service/ssooidc/v1.21.7/service/ssooidc/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/sso|https://github.com/aws/aws-sdk-go-v2/blob/service/sso/v1.18.7/service/sso/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2/service/sts|https://github.com/aws/aws-sdk-go-v2/blob/service/sts/v1.26.7/service/sts/LICENSE.txt|Apache-2.0
+github.com/aws/aws-sdk-go-v2|https://github.com/aws/aws-sdk-go-v2/blob/v1.24.1/LICENSE.txt|Apache-2.0
 github.com/aws/aws-sdk-go/internal/sync/singleflight|https://github.com/aws/aws-sdk-go/blob/v1.49.18/internal/sync/singleflight/LICENSE|BSD-3-Clause
 github.com/aws/aws-sdk-go|https://github.com/aws/aws-sdk-go/blob/v1.49.18/LICENSE.txt|Apache-2.0
 github.com/aws/smithy-go/internal/sync/singleflight|https://github.com/aws/smithy-go/blob/v1.19.0/internal/sync/singleflight/LICENSE|BSD-3-Clause
@ -120,7 +122,7 @@ github.com/containerd/stargz-snapshotter/estargz|https://github.com/containerd/s
 github.com/containerd/ttrpc|https://github.com/containerd/ttrpc/blob/v1.2.2/LICENSE|Apache-2.0
 github.com/containerd/typeurl/v2|https://github.com/containerd/typeurl/blob/v2.1.1/LICENSE|Apache-2.0
 github.com/containerd/typeurl|https://github.com/containerd/typeurl/blob/v1.0.2/LICENSE|Apache-2.0
-github.com/containers/image/v5|https://github.com/containers/image/blob/v5.29.0/LICENSE|Apache-2.0
+github.com/containers/image/v5|https://github.com/containers/image/blob/v5.29.1/LICENSE|Apache-2.0
 github.com/containers/libtrust|https://github.com/containers/libtrust/blob/c1716e8a8d01/LICENSE|Apache-2.0
 github.com/containers/ocicrypt|https://github.com/containers/ocicrypt/blob/v1.1.9/LICENSE|Apache-2.0
 github.com/cpuguy83/go-md2man/v2/md2man|https://github.com/cpuguy83/go-md2man/blob/v2.0.3/LICENSE.md|MIT
@ -155,7 +157,7 @@ github.com/go-errors/errors|https://github.com/go-errors/errors/blob/v1.4.2/LICE
 github.com/go-git/gcfg|https://github.com/go-git/gcfg/blob/3a3c6141e376/LICENSE|BSD-3-Clause
 github.com/go-git/go-billy/v5|https://github.com/go-git/go-billy/blob/v5.5.0/LICENSE|Apache-2.0
 github.com/go-git/go-git/v5|https://github.com/go-git/go-git/blob/v5.11.0/LICENSE|Apache-2.0
-github.com/go-gorp/gorp/v3|https://github.com/go-gorp/gorp/blob/v3.0.5/LICENSE|MIT
+github.com/go-gorp/gorp/v3|https://github.com/go-gorp/gorp/blob/v3.1.0/LICENSE|MIT
 github.com/go-ini/ini|https://github.com/go-ini/ini/blob/v1.67.0/LICENSE|Apache-2.0
 github.com/go-jose/go-jose/v3/json|https://github.com/go-jose/go-jose/blob/v3.0.1/json/LICENSE|BSD-3-Clause
 github.com/go-jose/go-jose/v3|https://github.com/go-jose/go-jose/blob/v3.0.1/LICENSE|Apache-2.0
@ -194,7 +196,7 @@ github.com/google/gofuzz|https://github.com/google/gofuzz/blob/v1.2.0/LICENSE|Ap
 github.com/google/licenseclassifier/v2|https://github.com/google/licenseclassifier/blob/v2.0.0/v2/LICENSE|Apache-2.0
 github.com/google/s2a-go|https://github.com/google/s2a-go/blob/v0.1.7/LICENSE.md|Apache-2.0
 github.com/google/shlex|https://github.com/google/shlex/blob/e7afc7fbc510/COPYING|Apache-2.0
-github.com/google/uuid|https://github.com/google/uuid/blob/v1.4.0/LICENSE|BSD-3-Clause
+github.com/google/uuid|https://github.com/google/uuid/blob/v1.6.0/LICENSE|BSD-3-Clause
 github.com/google/wire|https://github.com/google/wire/blob/v0.5.0/LICENSE|Apache-2.0
 github.com/googleapis/enterprise-certificate-proxy/client|https://github.com/googleapis/enterprise-certificate-proxy/blob/v0.3.2/LICENSE|Apache-2.0
 github.com/googleapis/gax-go/v2|https://github.com/googleapis/gax-go/blob/v2.12.0/v2/LICENSE|BSD-3-Clause
@ -217,7 +219,7 @@ github.com/hashicorp/go-uuid|https://github.com/hashicorp/go-uuid/blob/v1.0.3/LI
 github.com/hashicorp/go-version|https://github.com/hashicorp/go-version/blob/v1.6.0/LICENSE|MPL-2.0
 github.com/hashicorp/golang-lru/v2/simplelru|https://github.com/hashicorp/golang-lru/blob/v2.0.7/simplelru/LICENSE_list|BSD-3-Clause
 github.com/hashicorp/golang-lru/v2|https://github.com/hashicorp/golang-lru/blob/v2.0.7/LICENSE|MPL-2.0
-github.com/hashicorp/hcl/v2|https://github.com/hashicorp/hcl/blob/v2.17.0/LICENSE|MPL-2.0
+github.com/hashicorp/hcl/v2|https://github.com/hashicorp/hcl/blob/v2.19.1/LICENSE|MPL-2.0
 github.com/hashicorp/hcl|https://github.com/hashicorp/hcl/blob/v1.0.1-vault-5/LICENSE|MPL-2.0
 github.com/huandu/xstrings|https://github.com/huandu/xstrings/blob/v1.4.0/LICENSE|MIT
 github.com/imdario/mergo|https://github.com/imdario/mergo/blob/v0.3.16/LICENSE|BSD-3-Clause
@ -247,7 +249,7 @@ github.com/lann/builder|https://github.com/lann/builder/blob/47ae307949d0/LICENS
 github.com/lann/ps|https://github.com/lann/ps/blob/62de8c46ede0/LICENSE|MIT
 github.com/liamg/iamgo|https://github.com/liamg/iamgo/blob/v0.0.9/LICENSE|MIT
 github.com/liamg/jfather|https://github.com/liamg/jfather/blob/v0.0.7/LICENSE|MIT
-github.com/liamg/memoryfs|https://github.com/liamg/memoryfs/blob/v1.4.3/LICENSE|MIT
+github.com/liamg/memoryfs|https://github.com/liamg/memoryfs/blob/v1.6.0/LICENSE|MIT
 github.com/lib/pq|https://github.com/lib/pq/blob/v1.10.9/LICENSE.md|MIT
 github.com/liggitt/tabwriter|https://github.com/liggitt/tabwriter/blob/89fcab3d43de/LICENSE|BSD-3-Clause
 github.com/lunixbochs/struc|https://github.com/lunixbochs/struc/blob/784aaebc1d40/LICENSE|MIT
@ -259,6 +261,7 @@ github.com/masahiro331/go-mvn-version|https://github.com/masahiro331/go-mvn-vers
 github.com/mattn/go-colorable|https://github.com/mattn/go-colorable/blob/v0.1.13/LICENSE|MIT
 github.com/mattn/go-isatty|https://github.com/mattn/go-isatty/blob/v0.0.20/LICENSE|MIT
 github.com/mattn/go-runewidth|https://github.com/mattn/go-runewidth/blob/v0.0.15/LICENSE|MIT
+github.com/mattn/go-shellwords|https://github.com/mattn/go-shellwords/blob/v1.0.12/LICENSE|MIT
 github.com/mattn/go-sqlite3|https://github.com/mattn/go-sqlite3/blob/v1.14.18/LICENSE|MIT
 github.com/matttproud/golang_protobuf_extensions/v2/pbutil|https://github.com/matttproud/golang_protobuf_extensions/blob/v2.0.0/LICENSE|Apache-2.0
 github.com/microsoft/go-rustaudit|https://github.com/microsoft/go-rustaudit/blob/204dfee52032/LICENSE|MIT
@ -285,8 +288,8 @@ github.com/mpvl/unique|https://github.com/mpvl/unique/blob/cbe035fff7de/LICENSE|
 github.com/munnerz/goautoneg|https://github.com/munnerz/goautoneg/blob/a7dc8b61c822/LICENSE|BSD-3-Clause
 github.com/nmcclain/asn1-ber|https://github.com/nmcclain/asn1-ber/blob/2661553a0484/LICENSE|BSD-3-Clause
 github.com/nmcclain/ldap|https://github.com/nmcclain/ldap/blob/7f8d1e44eeba/LICENSE|BSD-3-Clause
-github.com/notaryproject/notation-core-go|https://github.com/notaryproject/notation-core-go/blob/v1.0.1/LICENSE|Apache-2.0
-github.com/notaryproject/notation-go|https://github.com/notaryproject/notation-go/blob/v1.0.1/LICENSE|Apache-2.0
+github.com/notaryproject/notation-core-go|https://github.com/notaryproject/notation-core-go/blob/v1.0.2/LICENSE|Apache-2.0
+github.com/notaryproject/notation-go|https://github.com/notaryproject/notation-go/blob/v1.1.0/LICENSE|Apache-2.0
 github.com/nozzle/throttler|https://github.com/nozzle/throttler/blob/2ea982251481/LICENSE|Apache-2.0
 github.com/oklog/ulid|https://github.com/oklog/ulid/blob/v1.3.1/LICENSE|Apache-2.0
 github.com/oleiade/reflections|https://github.com/oleiade/reflections/blob/v1.0.1/LICENSE|MIT
@ -319,10 +322,10 @@ github.com/rcrowley/go-metrics|https://github.com/rcrowley/go-metrics/blob/cf1ac
 github.com/remyoudompheng/bigfft|https://github.com/remyoudompheng/bigfft/blob/24d4a6f8daec/LICENSE|BSD-3-Clause
 github.com/rivo/uniseg|https://github.com/rivo/uniseg/blob/v0.4.4/LICENSE.txt|MIT
 github.com/rs/zerolog|https://github.com/rs/zerolog/blob/v1.31.0/LICENSE|MIT
-github.com/rubenv/sql-migrate/sqlparse|https://github.com/rubenv/sql-migrate/blob/v1.3.1/sqlparse/LICENSE|MIT
-github.com/rubenv/sql-migrate|https://github.com/rubenv/sql-migrate/blob/v1.3.1/LICENSE|MIT
+github.com/rubenv/sql-migrate/sqlparse|https://github.com/rubenv/sql-migrate/blob/v1.5.2/sqlparse/LICENSE|MIT
+github.com/rubenv/sql-migrate|https://github.com/rubenv/sql-migrate/blob/v1.5.2/LICENSE|MIT
 github.com/russross/blackfriday/v2|https://github.com/russross/blackfriday/blob/v2.1.0/LICENSE.txt|BSD-2-Clause
-github.com/sagikazarmark/locafero|https://github.com/sagikazarmark/locafero/blob/v0.3.0/LICENSE|MIT
+github.com/sagikazarmark/locafero|https://github.com/sagikazarmark/locafero/blob/v0.4.0/LICENSE|MIT
 github.com/sagikazarmark/slog-shim|https://github.com/sagikazarmark/slog-shim/blob/v0.1.0/LICENSE|BSD-3-Clause
 github.com/samber/lo|https://github.com/samber/lo/blob/v1.38.1/LICENSE|MIT
 github.com/saracen/walker|https://github.com/saracen/walker/blob/v0.1.3/LICENSE|MIT
@ -340,11 +343,11 @@ github.com/smarty/assertions|https://github.com/smarty/assertions/blob/v1.15.0/L
 github.com/smartystreets/goconvey|https://github.com/smartystreets/goconvey/blob/v1.8.1/LICENSE.md|MIT
 github.com/sosodev/duration|https://github.com/sosodev/duration/blob/v1.1.0/LICENSE|MIT
 github.com/sourcegraph/conc|https://github.com/sourcegraph/conc/blob/v0.3.0/LICENSE|MIT
-github.com/spf13/afero|https://github.com/spf13/afero/blob/v1.10.0/LICENSE.txt|Apache-2.0
-github.com/spf13/cast|https://github.com/spf13/cast/blob/v1.5.1/LICENSE|MIT
+github.com/spf13/afero|https://github.com/spf13/afero/blob/v1.11.0/LICENSE.txt|Apache-2.0
+github.com/spf13/cast|https://github.com/spf13/cast/blob/v1.6.0/LICENSE|MIT
 github.com/spf13/cobra|https://github.com/spf13/cobra/blob/v1.8.0/LICENSE.txt|Apache-2.0
 github.com/spf13/pflag|https://github.com/spf13/pflag/blob/v1.0.5/LICENSE|BSD-3-Clause
-github.com/spf13/viper|https://github.com/spf13/viper/blob/v1.17.0/LICENSE|MIT
+github.com/spf13/viper|https://github.com/spf13/viper/blob/v1.18.2/LICENSE|MIT
 github.com/spiffe/go-spiffe/v2|https://github.com/spiffe/go-spiffe/blob/v2.1.6/v2/LICENSE|Apache-2.0
 github.com/stefanberger/go-pkcs11uri|https://github.com/stefanberger/go-pkcs11uri/blob/78d3cae3a980/LICENSE|Apache-2.0
 github.com/stretchr/objx|https://github.com/stretchr/objx/blob/v0.5.1/LICENSE|MIT
@ -363,7 +366,7 @@ github.com/ulikunitz/xz|https://github.com/ulikunitz/xz/blob/v0.5.11/LICENSE|BSD
 github.com/urfave/cli/v2|https://github.com/urfave/cli/blob/v2.25.5/LICENSE|MIT
 github.com/vbatts/tar-split/archive/tar|https://github.com/vbatts/tar-split/blob/v0.11.5/LICENSE|BSD-3-Clause
 github.com/vbauerster/mpb/v8|https://github.com/vbauerster/mpb/blob/v8.6.2/UNLICENSE|Unlicense
-github.com/vektah/gqlparser/v2|https://github.com/vektah/gqlparser/blob/v2.5.10/LICENSE|MIT
+github.com/vektah/gqlparser/v2|https://github.com/vektah/gqlparser/blob/v2.5.11/LICENSE|MIT
 github.com/xanzy/go-gitlab|https://github.com/xanzy/go-gitlab/blob/v0.94.0/LICENSE|Apache-2.0
 github.com/xanzy/ssh-agent|https://github.com/xanzy/ssh-agent/blob/v0.3.3/LICENSE|Apache-2.0
 github.com/xeipuuv/gojsonpointer|https://github.com/xeipuuv/gojsonpointer/blob/02993c407bfb/LICENSE-APACHE-2.0.txt|Apache-2.0
@ -387,33 +390,33 @@ go.opentelemetry.io/otel/trace|https://github.com/open-telemetry/opentelemetry-g
 go.opentelemetry.io/otel|https://github.com/open-telemetry/opentelemetry-go/blob/v1.21.0/LICENSE|Apache-2.0
 go.uber.org/multierr|https://github.com/uber-go/multierr/blob/v1.11.0/LICENSE.txt|MIT
 go.uber.org/zap|https://github.com/uber-go/zap/blob/v1.26.0/LICENSE.txt|MIT
-golang.org/x/crypto/md4|https://cs.opensource.google/go/x/crypto/+/v0.17.0:LICENSE|BSD-3-Clause
-golang.org/x/crypto/pbkdf2|https://cs.opensource.google/go/x/crypto/+/v0.17.0:LICENSE|BSD-3-Clause
-golang.org/x/crypto/pkcs12|https://cs.opensource.google/go/x/crypto/+/v0.17.0:LICENSE|BSD-3-Clause
-golang.org/x/crypto|https://cs.opensource.google/go/x/crypto/+/v0.17.0:LICENSE|BSD-3-Clause
+golang.org/x/crypto/md4|https://cs.opensource.google/go/x/crypto/+/v0.18.0:LICENSE|BSD-3-Clause
+golang.org/x/crypto/pbkdf2|https://cs.opensource.google/go/x/crypto/+/v0.18.0:LICENSE|BSD-3-Clause
+golang.org/x/crypto/pkcs12|https://cs.opensource.google/go/x/crypto/+/v0.18.0:LICENSE|BSD-3-Clause
+golang.org/x/crypto|https://cs.opensource.google/go/x/crypto/+/v0.18.0:LICENSE|BSD-3-Clause
 golang.org/x/exp/constraints|https://cs.opensource.google/go/x/exp/+/2478ac86:LICENSE|BSD-3-Clause
 golang.org/x/exp|https://cs.opensource.google/go/x/exp/+/2478ac86:LICENSE|BSD-3-Clause
 golang.org/x/mod/semver|https://cs.opensource.google/go/x/mod/+/v0.14.0:LICENSE|BSD-3-Clause
 golang.org/x/mod|https://cs.opensource.google/go/x/mod/+/v0.14.0:LICENSE|BSD-3-Clause
-golang.org/x/net/publicsuffix|https://cs.opensource.google/go/x/net/+/v0.19.0:LICENSE|BSD-3-Clause
-golang.org/x/net/webdav|https://cs.opensource.google/go/x/net/+/v0.19.0:LICENSE|BSD-3-Clause
-golang.org/x/net|https://cs.opensource.google/go/x/net/+/v0.19.0:LICENSE|BSD-3-Clause
-golang.org/x/oauth2|https://cs.opensource.google/go/x/oauth2/+/v0.15.0:LICENSE|BSD-3-Clause
+golang.org/x/net/publicsuffix|https://cs.opensource.google/go/x/net/+/v0.20.0:LICENSE|BSD-3-Clause
+golang.org/x/net/webdav|https://cs.opensource.google/go/x/net/+/v0.20.0:LICENSE|BSD-3-Clause
+golang.org/x/net|https://cs.opensource.google/go/x/net/+/v0.20.0:LICENSE|BSD-3-Clause
+golang.org/x/oauth2|https://cs.opensource.google/go/x/oauth2/+/v0.16.0:LICENSE|BSD-3-Clause
 golang.org/x/sync/errgroup|https://cs.opensource.google/go/x/sync/+/v0.5.0:LICENSE|BSD-3-Clause
 golang.org/x/sync/semaphore|https://cs.opensource.google/go/x/sync/+/v0.5.0:LICENSE|BSD-3-Clause
 golang.org/x/sync|https://cs.opensource.google/go/x/sync/+/v0.5.0:LICENSE|BSD-3-Clause
-golang.org/x/sys/cpu|https://cs.opensource.google/go/x/sys/+/v0.15.0:LICENSE|BSD-3-Clause
-golang.org/x/sys/execabs|https://cs.opensource.google/go/x/sys/+/v0.15.0:LICENSE|BSD-3-Clause
-golang.org/x/sys/unix|https://cs.opensource.google/go/x/sys/+/v0.15.0:LICENSE|BSD-3-Clause
-golang.org/x/sys|https://cs.opensource.google/go/x/sys/+/v0.15.0:LICENSE|BSD-3-Clause
-golang.org/x/term|https://cs.opensource.google/go/x/term/+/v0.15.0:LICENSE|BSD-3-Clause
+golang.org/x/sys/cpu|https://cs.opensource.google/go/x/sys/+/v0.16.0:LICENSE|BSD-3-Clause
+golang.org/x/sys/execabs|https://cs.opensource.google/go/x/sys/+/v0.16.0:LICENSE|BSD-3-Clause
+golang.org/x/sys/unix|https://cs.opensource.google/go/x/sys/+/v0.16.0:LICENSE|BSD-3-Clause
+golang.org/x/sys|https://cs.opensource.google/go/x/sys/+/v0.16.0:LICENSE|BSD-3-Clause
+golang.org/x/term|https://cs.opensource.google/go/x/term/+/v0.16.0:LICENSE|BSD-3-Clause
 golang.org/x/text|https://cs.opensource.google/go/x/text/+/v0.14.0:LICENSE|BSD-3-Clause
 golang.org/x/time/rate|https://cs.opensource.google/go/x/time/+/v0.5.0:LICENSE|BSD-3-Clause
 golang.org/x/tools|https://cs.opensource.google/go/x/tools/+/v0.15.0:LICENSE|BSD-3-Clause
 golang.org/x/xerrors|https://cs.opensource.google/go/x/xerrors/+/104605ab:LICENSE|BSD-3-Clause
-google.golang.org/api/googleapi|https://github.com/googleapis/google-api-go-client/blob/v0.152.0/LICENSE|BSD-3-Clause
-google.golang.org/api/internal/third_party/uritemplates|https://github.com/googleapis/google-api-go-client/blob/v0.152.0/internal/third_party/uritemplates/LICENSE|BSD-3-Clause
-google.golang.org/api|https://github.com/googleapis/google-api-go-client/blob/v0.152.0/LICENSE|BSD-3-Clause
+google.golang.org/api/googleapi|https://github.com/googleapis/google-api-go-client/blob/v0.153.0/LICENSE|BSD-3-Clause
+google.golang.org/api/internal/third_party/uritemplates|https://github.com/googleapis/google-api-go-client/blob/v0.153.0/internal/third_party/uritemplates/LICENSE|BSD-3-Clause
+google.golang.org/api|https://github.com/googleapis/google-api-go-client/blob/v0.153.0/LICENSE|BSD-3-Clause
 google.golang.org/appengine|https://github.com/golang/appengine/blob/v1.6.8/LICENSE|Apache-2.0
 google.golang.org/genproto/googleapis/api|https://github.com/googleapis/go-genproto/blob/bbf56f31fb17/googleapis/api/LICENSE|Apache-2.0
 google.golang.org/genproto/googleapis/rpc/status|https://github.com/googleapis/go-genproto/blob/83a465c0220f/googleapis/rpc/LICENSE|Apache-2.0
@ -422,7 +425,7 @@ google.golang.org/genproto/googleapis/type/expr|https://github.com/googleapis/go
 google.golang.org/genproto/googleapis/type|https://github.com/googleapis/go-genproto/blob/bbf56f31fb17/LICENSE|Apache-2.0
 google.golang.org/genproto/protobuf/field_mask|https://github.com/googleapis/go-genproto/blob/bbf56f31fb17/LICENSE|Apache-2.0
 google.golang.org/grpc|https://github.com/grpc/grpc-go/blob/v1.59.0/LICENSE|Apache-2.0
-google.golang.org/protobuf|https://github.com/protocolbuffers/protobuf-go/blob/v1.31.0/LICENSE|BSD-3-Clause
+google.golang.org/protobuf|https://github.com/protocolbuffers/protobuf-go/blob/v1.32.0/LICENSE|BSD-3-Clause
 gopkg.in/cheggaaa/pb.v1|https://github.com/cheggaaa/pb/blob/v1.0.28/LICENSE|BSD-3-Clause
 gopkg.in/go-jose/go-jose.v2/json|https://github.com/go-jose/go-jose/blob/v2.6.1/json/LICENSE|BSD-3-Clause
 gopkg.in/go-jose/go-jose.v2|https://github.com/go-jose/go-jose/blob/v2.6.1/LICENSE|Apache-2.0
@ -434,14 +437,14 @@ gopkg.in/square/go-jose.v2|https://github.com/square/go-jose/blob/v2.6.0/LICENSE
 gopkg.in/warnings.v0|https://github.com/go-warnings/warnings/blob/v0.1.2/LICENSE|BSD-2-Clause
 gopkg.in/yaml.v2|https://github.com/go-yaml/yaml/blob/v2.4.0/LICENSE|Apache-2.0
 gopkg.in/yaml.v3|https://github.com/go-yaml/yaml/blob/v3.0.1/LICENSE|MIT
-k8s.io/apimachinery|https://github.com/kubernetes/apimachinery/blob/v0.28.3/LICENSE|Apache-2.0
-k8s.io/apiserver|https://github.com/kubernetes/apiserver/blob/v0.27.3/LICENSE|Apache-2.0
-k8s.io/api|https://github.com/kubernetes/api/blob/v0.28.3/LICENSE|Apache-2.0
-k8s.io/cli-runtime|https://github.com/kubernetes/cli-runtime/blob/v0.28.2/LICENSE|Apache-2.0
-k8s.io/client-go|https://github.com/kubernetes/client-go/blob/v0.28.3/LICENSE|Apache-2.0
-k8s.io/component-base|https://github.com/kubernetes/component-base/blob/v0.28.2/LICENSE|Apache-2.0
-k8s.io/klog/v2|https://github.com/kubernetes/klog/blob/v2.100.1/LICENSE|Apache-2.0
-k8s.io/kubectl|https://github.com/kubernetes/kubectl/blob/v0.28.2/LICENSE|Apache-2.0
+k8s.io/apimachinery|https://github.com/kubernetes/apimachinery/blob/v0.28.4/LICENSE|Apache-2.0
+k8s.io/apiserver|https://github.com/kubernetes/apiserver/blob/v0.28.2/LICENSE|Apache-2.0
+k8s.io/api|https://github.com/kubernetes/api/blob/v0.28.4/LICENSE|Apache-2.0
+k8s.io/cli-runtime|https://github.com/kubernetes/cli-runtime/blob/v0.28.4/LICENSE|Apache-2.0
+k8s.io/client-go|https://github.com/kubernetes/client-go/blob/v0.28.4/LICENSE|Apache-2.0
+k8s.io/component-base|https://github.com/kubernetes/component-base/blob/v0.28.3/LICENSE|Apache-2.0
+k8s.io/klog/v2|https://github.com/kubernetes/klog/blob/v2.110.1/LICENSE|Apache-2.0
+k8s.io/kubectl|https://github.com/kubernetes/kubectl/blob/v0.28.3/LICENSE|Apache-2.0
 lukechampine.com/uint128|https://github.com/lukechampine/uint128/blob/v1.2.0/LICENSE|MIT
 modernc.org/cc/v3|Unknown|Unknown
 modernc.org/ccgo/v3/lib|Unknown|Unknown
--- a/go.mod
+++ b/go.mod
@ -9,7 +9,7 @@ require (
 	github.com/bmatcuk/doublestar/v4 v4.6.1
 	github.com/briandowns/spinner v1.23.0
 	github.com/chartmuseum/auth v0.5.0
-	github.com/containers/common v0.57.0
+	github.com/containers/common v0.57.2
 	github.com/didip/tollbooth/v6 v6.1.2
 	github.com/docker/distribution v2.8.3+incompatible
 	github.com/dustin/go-humanize v1.0.1
@ -17,7 +17,7 @@ require (
 	github.com/go-ldap/ldap/v3 v3.4.6
 	github.com/gofrs/uuid v4.4.0+incompatible
 	github.com/google/go-containerregistry v0.17.0
-	github.com/google/uuid v1.4.0
+	github.com/google/uuid v1.6.0
 	github.com/gorilla/mux v1.8.1
 	github.com/hashicorp/golang-lru/v2 v2.0.7
 	github.com/json-iterator/go v1.1.12
@ -33,40 +33,40 @@ require (
 	github.com/rs/zerolog v1.31.0
 	github.com/smartystreets/goconvey v1.8.1
 	github.com/spf13/cobra v1.8.0
-	github.com/spf13/viper v1.17.0
+	github.com/spf13/viper v1.18.2
 	github.com/stretchr/testify v1.8.4
 	github.com/swaggo/swag v1.16.2
-	github.com/vektah/gqlparser/v2 v2.5.10
+	github.com/vektah/gqlparser/v2 v2.5.11
 	go.etcd.io/bbolt v1.3.8
-	golang.org/x/crypto v0.17.0
+	golang.org/x/crypto v0.18.0
 	gopkg.in/resty.v1 v1.12.0
 	gopkg.in/yaml.v2 v2.4.0
 )

 require (
-	github.com/aquasecurity/trivy v0.47.0
+	github.com/aquasecurity/trivy v0.48.3
 	github.com/aws/aws-sdk-go-v2/service/dynamodb v1.26.6
-	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.25.2
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.26.2
 	github.com/aws/aws-secretsmanager-caching-go v1.1.3
-	github.com/containers/image/v5 v5.29.0
+	github.com/containers/image/v5 v5.29.1
 	github.com/google/go-github/v52 v52.0.0
 	github.com/gorilla/securecookie v1.1.2
 	github.com/gorilla/sessions v1.2.2
 	github.com/migueleliasweb/go-github-mock v0.0.22
-	github.com/notaryproject/notation-go v1.0.1
+	github.com/notaryproject/notation-go v1.1.0
 	github.com/opencontainers/distribution-spec/specs-go v0.0.0-20230117141039-067a0f5b0e25
 	github.com/project-zot/mockoidc v0.0.0-20230307111146-f607b4b5fb97
 	github.com/sigstore/cosign/v2 v2.2.2
 	github.com/swaggo/http-swagger v1.3.4
 	github.com/zitadel/oidc v1.13.5
-	golang.org/x/oauth2 v0.15.0
+	golang.org/x/oauth2 v0.16.0
 	modernc.org/sqlite v1.27.0
 	oras.land/oras-go/v2 v2.3.1
 )

 require (
 	golang.org/x/sync v0.5.0 // indirect
-	golang.org/x/sys v0.15.0 // indirect
+	golang.org/x/sys v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 )

@ -87,21 +87,25 @@ require (
 	github.com/Microsoft/hcsshim v0.12.0-rc.1 // indirect
 	github.com/alecthomas/chroma v0.10.0 // indirect
 	github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect
-	github.com/aquasecurity/defsec v0.93.1 // indirect
+	github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
+	github.com/aquasecurity/defsec v0.93.2-0.20231208181342-318642ac6f08 // indirect
 	github.com/aquasecurity/table v1.8.0 // indirect
 	github.com/aquasecurity/tml v0.6.1 // indirect
+	github.com/aquasecurity/trivy-iac v0.7.1 // indirect
 	github.com/aquasecurity/trivy-java-db v0.0.0-20230209231723-7cddb1406728 // indirect
+	github.com/aquasecurity/trivy-policies v0.6.1-0.20231120231532-f6f2330bf842 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.14 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.90 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/v4a v1.1.6 // indirect
 	github.com/aws/aws-sdk-go-v2/service/dynamodbstreams v1.18.5 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ebs v1.18.1 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ec2 v1.98.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ec2 v1.134.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.38 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.8.10 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.15.6 // indirect
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.40.2 // indirect
+	github.com/bitnami/go-version v0.0.0-20231130084017-bb00604d650c // indirect
 	github.com/buildkite/agent/v3 v3.59.0 // indirect
 	github.com/buildkite/go-pipeline v0.2.0 // indirect
 	github.com/buildkite/interpolate v0.0.0-20200526001904-07f35b4ae251 // indirect
@ -125,7 +129,7 @@ require (
 	github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/go-errors/errors v1.4.2 // indirect
-	github.com/go-gorp/gorp/v3 v3.0.5 // indirect
+	github.com/go-gorp/gorp/v3 v3.1.0 // indirect
 	github.com/go-ini/ini v1.67.0 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.1 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
@ -148,7 +152,7 @@ require (
 	github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
 	github.com/liamg/iamgo v0.0.9 // indirect
 	github.com/liamg/jfather v0.0.7 // indirect
-	github.com/liamg/memoryfs v1.4.3 // indirect
+	github.com/liamg/memoryfs v1.6.0 // indirect
 	github.com/lib/pq v1.10.9 // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/lunixbochs/struc v0.0.0-20200707160740-784aaebc1d40 // indirect
@ -157,6 +161,7 @@ require (
 	github.com/masahiro331/go-ext4-filesystem v0.0.0-20230612143131-27ccd485b7a1 // indirect
 	github.com/masahiro331/go-vmdk-parser v0.0.0-20221225061455-612096e4bbbd // indirect
 	github.com/masahiro331/go-xfs-filesystem v0.0.0-20230608043311-a335f4599b70 // indirect
+	github.com/mattn/go-shellwords v1.0.12 // indirect
 	github.com/mattn/go-sqlite3 v1.14.18 // indirect
 	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
 	github.com/microsoft/go-rustaudit v0.0.0-20220808201409-204dfee52032 // indirect
@ -181,8 +186,8 @@ require (
 	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
-	github.com/rubenv/sql-migrate v1.3.1 // indirect
-	github.com/sagikazarmark/locafero v0.3.0 // indirect
+	github.com/rubenv/sql-migrate v1.5.2 // indirect
+	github.com/sagikazarmark/locafero v0.4.0 // indirect
 	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
 	github.com/samber/lo v1.38.1 // indirect
 	github.com/shopspring/decimal v1.3.1 // indirect
@ -191,7 +196,7 @@ require (
 	github.com/smarty/assertions v1.15.0 // indirect
 	github.com/sosodev/duration v1.1.0 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
-	github.com/spdx/tools-golang v0.5.0 // indirect
+	github.com/spdx/tools-golang v0.5.4-0.20231108154018-0c0f394b5e1a // indirect
 	github.com/tetratelabs/wazero v1.2.1 // indirect
 	github.com/urfave/cli/v2 v2.25.5 // indirect
 	github.com/vbauerster/mpb/v8 v8.6.2 // indirect
@ -206,12 +211,12 @@ require (
 	google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
 	gopkg.in/go-jose/go-jose.v2 v2.6.1 // indirect
-	helm.sh/helm/v3 v3.12.3 // indirect
-	k8s.io/apiextensions-apiserver v0.27.3 // indirect
-	k8s.io/apiserver v0.27.3 // indirect
-	k8s.io/cli-runtime v0.28.2 // indirect
-	k8s.io/component-base v0.28.2 // indirect
-	k8s.io/kubectl v0.28.2 // indirect
+	helm.sh/helm/v3 v3.13.0 // indirect
+	k8s.io/apiextensions-apiserver v0.28.2 // indirect
+	k8s.io/apiserver v0.28.2 // indirect
+	k8s.io/cli-runtime v0.28.4 // indirect
+	k8s.io/component-base v0.28.3 // indirect
+	k8s.io/kubectl v0.28.3 // indirect
 	lukechampine.com/uint128 v1.2.0 // indirect
 	modernc.org/cc/v3 v3.40.0 // indirect
 	modernc.org/ccgo/v3 v3.16.13 // indirect
@ -231,7 +236,7 @@ require (
 	cloud.google.com/go/compute v1.23.3 // indirect
 	cloud.google.com/go/compute/metadata v0.2.3 // indirect
 	cloud.google.com/go/iam v1.1.5 // indirect
-	cloud.google.com/go/storage v1.33.0 // indirect
+	cloud.google.com/go/storage v1.35.1 // indirect
 	cuelang.org/go v0.6.0 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
 	github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper v0.2.0 // indirect
@ -270,27 +275,27 @@ require (
 	github.com/aliyun/credentials-go v1.3.1 // indirect
 	github.com/apparentlymart/go-cidr v1.1.0 // indirect
 	github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
-	github.com/aquasecurity/go-dep-parser v0.0.0-20231030050624-4548cca9a5c9 // indirect
+	github.com/aquasecurity/go-dep-parser v0.0.0-20231120074854-8322cc2242bf // indirect
 	github.com/aquasecurity/go-gem-version v0.0.0-20201115065557-8eed6fe000ce // indirect
 	github.com/aquasecurity/go-npm-version v0.0.0-20201110091526-0b796d180798 // indirect
 	github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46 // indirect
 	github.com/aquasecurity/go-version v0.0.0-20210121072130-637058cfe492 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/aws/aws-sdk-go v1.49.18
-	github.com/aws/aws-sdk-go-v2 v1.24.0
-	github.com/aws/aws-sdk-go-v2/config v1.25.11
-	github.com/aws/aws-sdk-go-v2/credentials v1.16.9 // indirect
+	github.com/aws/aws-sdk-go-v2 v1.24.1
+	github.com/aws/aws-sdk-go-v2/config v1.26.6
+	github.com/aws/aws-sdk-go-v2/credentials v1.16.16 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.12.12
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.9 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.9 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.9 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/ini v1.7.1 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.21.0 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.24.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.18.2 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.8 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.18.2 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.2 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.26.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 // indirect
 	github.com/aws/smithy-go v1.19.0
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20231024185945-8841054dbdb8 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
@ -368,7 +373,7 @@ require (
 	github.com/hashicorp/go-uuid v1.0.3 // indirect
 	github.com/hashicorp/go-version v1.6.0 // indirect
 	github.com/hashicorp/hcl v1.0.1-vault-5 // indirect
-	github.com/hashicorp/hcl/v2 v2.17.0 // indirect
+	github.com/hashicorp/hcl/v2 v2.19.1 // indirect
 	github.com/huandu/xstrings v1.4.0 // indirect
 	github.com/imdario/mergo v0.3.16 // indirect
 	github.com/in-toto/in-toto-golang v0.9.0 // indirect
@ -406,13 +411,13 @@ require (
 	github.com/mozillazg/docker-credential-acr-helper v0.3.0 // indirect
 	github.com/mpvl/unique v0.0.0-20150818121801-cbe035fff7de // indirect
 	github.com/nmcclain/asn1-ber v0.0.0-20170104154839-2661553a0484 // indirect
-	github.com/notaryproject/notation-core-go v1.0.1
+	github.com/notaryproject/notation-core-go v1.0.2
 	github.com/oklog/ulid v1.3.1 // indirect
 	github.com/open-policy-agent/opa v0.59.0 // indirect
 	github.com/opencontainers/runc v1.1.10 // indirect
 	github.com/opencontainers/runtime-spec v1.1.0 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
-	github.com/owenrumney/squealer v1.1.1 // indirect
+	github.com/owenrumney/squealer v1.2.1 // indirect
 	github.com/pelletier/go-toml/v2 v2.1.0 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/proglottis/gpgme v0.1.3 // indirect
@ -433,8 +438,8 @@ require (
 	github.com/sigstore/sigstore v1.7.6
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
-	github.com/spf13/afero v1.10.0 // indirect
-	github.com/spf13/cast v1.5.1 // indirect
+	github.com/spf13/afero v1.11.0 // indirect
+	github.com/spf13/cast v1.6.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/spiffe/go-spiffe/v2 v2.1.6 // indirect
 	github.com/stefanberger/go-pkcs11uri v0.0.0-20201008174630-78d3cae3a980 // indirect
@ -469,26 +474,26 @@ require (
 	go.uber.org/zap v1.26.0 // indirect
 	golang.org/x/exp v0.0.0-20231108232855-2478ac86f678
 	golang.org/x/mod v0.14.0 // indirect
-	golang.org/x/net v0.19.0 // indirect
-	golang.org/x/term v0.15.0 // indirect
+	golang.org/x/net v0.20.0 // indirect
+	golang.org/x/term v0.16.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
 	golang.org/x/tools v0.15.0 // indirect
 	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
-	google.golang.org/api v0.152.0 // indirect
+	google.golang.org/api v0.153.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17 // indirect
 	google.golang.org/grpc v1.59.0 // indirect
-	google.golang.org/protobuf v1.31.0
+	google.golang.org/protobuf v1.32.0
 	gopkg.in/cheggaaa/pb.v1 v1.0.28 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/square/go-jose.v2 v2.6.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/api v0.28.3 // indirect
-	k8s.io/apimachinery v0.28.3 // indirect
-	k8s.io/client-go v0.28.3 // indirect
-	k8s.io/klog/v2 v2.100.1 // indirect
+	k8s.io/api v0.28.4 // indirect
+	k8s.io/apimachinery v0.28.4 // indirect
+	k8s.io/client-go v0.28.4 // indirect
+	k8s.io/klog/v2 v2.110.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
 	k8s.io/utils v0.0.0-20230726121419-3b25d923346b // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
--- a/go.sum
+++ b/go.sum