GO-2026-4355 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, skaffold-fips, flux-source-controller-fips, slsa-verifier, witness, kyverno, image-factory-fips, cloudbeat, gh, tflint, crossplane-fips, goreleaser, zot, kyverno-policy-reporter-plugins-kyverno-fips, gitsign, policy-controller, vexctl, cg,...