Wiz Remediate Vulnerabilities in: /go.mod

[wiz-887e6bf419]

Wiz has identified Vulnerabilities in the following files: /go.mod. This PR contains the remediations for them.

/go.mod

Vulnerabilities:
CVE-2024-45337
GHSA-32gq-x56h-299c
CVE-2024-45338

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[mj-palanker]

I think you need to vendor

go: inconsistent vendoring in /home/runner/work/cone/cone:
golang.org/x/[email protected]: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
filippo.io/[email protected]: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
golang.org/x/[email protected]: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
filippo.io/[email protected]: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
golang.org/x/[email protected]: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
golang.org/x/[email protected]: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod

To ignore the vendor directory, use -mod=readonly or -mod=mod.
To sync the vendor directory, run:
go mod vendor