Major upgrade for golang.org/x/crypto

[tolgaOzen]

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=6080192&groupId=6798&sidebarIssueTask=572878&sidebarTab=tasks

Scope

This task includes issues in the following containers:

• ghcr.io/permify/permify-beta
• ghcr.io/permify/permify

TLDR

golang.org/x/crypto is affected by 2 unique vulnerabilities. 1 is critical and 1 is high.

How to fix

Rebuild your docker image and make sure you use the latest OS base image. Another method to fix this is to not install this package in your docker image at all if you do not require it. You might be able to start from a 'slimmer' base image that contains less packages.

In order to fix all of these vulnerabilities, update golang.org/x/crypto to 0.35.0. In order to solve only the critical issues, update to 0.31.0 or upgrade one at a time.