[Snyk] Security upgrade golang from 1.17.7-alpine to 1.18.7-alpine

[snyk-bot]

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

• Dockerfile

We recommend upgrading to golang:1.18.7-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity	Priority Score / 1000	Issue	Exploit Maturity
	400	Loop with Unreachable Exit Condition ('Infinite Loop') SNYK-ALPINE315-LIBRETLS-2428776	No Known Exploit
	400	Loop with Unreachable Exit Condition ('Infinite Loop') SNYK-ALPINE315-OPENSSL-2426331	No Known Exploit
	400	Loop with Unreachable Exit Condition ('Infinite Loop') SNYK-ALPINE315-OPENSSL-2426331	No Known Exploit
	400	Out-of-bounds Write SNYK-ALPINE315-ZLIB-2434420	No Known Exploit
	500	Out-of-bounds Write SNYK-ALPINE315-ZLIB-2976173	No Known Exploit

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[CLAassistant]

All committers have signed the CLA.

[coveralls]

Pull Request Test Coverage Report for Build 3427288332

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 3 unchanged lines in 1 file lost coverage.
• Overall coverage decreased (-0.05%) to 56.825%

---

Files with Coverage Reduction	New Missed Lines	%
services/dkg/pedersen/handler.go	3	87.23%

Totals
Change from base Build 3412119124:	-0.05%
Covered Lines:	3272
Relevant Lines:	5758

---

💛 - Coveralls

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[pierluca]

I believe there's a 1.18.8 version now. You might want to use that one.

[chenchanglew]

I think is because the other version also has some vulnerabilities.

[coveralls]

Pull Request Test Coverage Report for Build 3427288332

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 3 unchanged lines in 1 file lost coverage.
• Overall coverage decreased (-0.05%) to 56.825%

---

Files with Coverage Reduction	New Missed Lines	%
services/dkg/pedersen/handler.go	3	87.23%

Totals
Change from base Build 3412119124:	-0.05%
Covered Lines:	3272
Relevant Lines:	5758

---

💛 - Coveralls