From d7772199e80fa243e06b85cf067c12c50b5de615 Mon Sep 17 00:00:00 2001
From: Nicholas Turner <1205393+nckturner@users.noreply.github.com>
Date: Tue, 28 Nov 2023 12:27:05 -0800
Subject: [PATCH] Update go to 1.21.4 (#648)

---
 .github/workflows/deps.yml | 28 ++++++++++++++++++++++++++++
 Dockerfile                 |  2 +-
 2 files changed, 29 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/deps.yml

diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml
new file mode 100644
index 000000000..93795109d
--- /dev/null
+++ b/.github/workflows/deps.yml
@@ -0,0 +1,28 @@
+name: "Dependency Review"
+on: [push, pull_request, workflow_dispatch]
+permissions:
+  contents: read
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Checkout Repository"
+        uses: actions/checkout@v4
+        with:
+          show-progress: false
+      - name: "Dependency Review"
+        uses: actions/dependency-review-action@v3
+        with:
+          vulnerability-check: false
+  govulncheck:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Checkout Repository"
+        uses: actions/checkout@v4
+        with:
+          show-progress: false
+      - id: govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-input: 1.21.4
+          go-version-file: go.mod
diff --git a/Dockerfile b/Dockerfile
index 5d3f48a1f..bbf922147 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 ARG image=public.ecr.aws/eks-distro-build-tooling/eks-distro-minimal-base-nonroot:2023-02-22-1677092456.2
-ARG golang_image=public.ecr.aws/eks-distro-build-tooling/golang:1.19-gcc
+ARG golang_image=public.ecr.aws/docker/library/golang:1.21.4
 
 FROM --platform=$BUILDPLATFORM $golang_image AS builder
 WORKDIR /go/src/github.com/kubernetes-sigs/aws-iam-authenticator