Upgrade Container-Resolver to 1.0.8 (AST-91283)

[cx-alex-cohen]

By submitting this pull request, you agree to the terms within the Checkmarx Code of Conduct. Please review the contributing guidelines for guidance on creating high-quality pull requests.

Description

Please provide a summary of the changes and the related issue. Include relevant motivation and context.

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update

Related Issues

Link any related issues or tickets.

Checklist

• I have performed a self-review of my code
• I have added tests that prove my fix is effective or that my feature works
• I have added necessary documentation (if appropriate)
• Any dependent changes have been merged and published in downstream modules
• I have updated the CLI help for new/changed functionality in this PR (if applicable)
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

Screenshots (if applicable)

Add screenshots to help explain your changes.

Additional Notes

Add any other relevant information.

[github-actions]

Checkmarx One – Scan Summary & Details – ec29137e-f580-4a08-82c9-34e6e16da53f

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2025-24976	Go-github.1485827954.workers.dev/distribution/distribution/v3-v3.0.0-beta.1	details Recommended version: v3.0.1-0.20250403190400-dbca4995c83c Description: Distribution is a toolkit to pack, ship, store, and deliver container content. Systems running registry with token authentication enabled may be vu... Attack Vector: NETWORK Attack Complexity: LOW ID: KbkCZpY9DhWIHaCxSqYtcrstLLBqE3%2B4XjJWjeN0g%2FM%3D Vulnerable Package

Fixed Issues (2)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2024-45339	Go-github.1485827954.workers.dev/golang/glog-v1.2.2
	CVE-2024-40635	Go-github.1485827954.workers.dev/containerd/containerd-v1.7.24

[cx-elchanan-arbiv]

In this PR, in addition to upgrading Container-Resolver to 1.0.8, there's also a version upgrade of Go from go 1.23.6 to go 1.24.1.
This requires some updates in our code.
We need to first open a PR for this upgrade, and after that, another one to upgrade the container version.