Merge remote-tracking branch 'upstream/main' into dependabot/go_modul…

…es/chainguard.dev/go-grpc-kit-0.17.2

Signed-off-by: Bob Callaway <[email protected]>

.github/workflows/codeql-analysis.yml

@@ -41,6 +41,17 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
+    - name: Extract version of Go to use
+      run: echo "GOVERSION=$(cat Dockerfile|grep golang | awk ' { print $2 } ' | cut -d '@' -f 1 | cut -d ':' -f 2 | uniq)" >> $GITHUB_ENV
+    - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      with:
+        go-version: ${{ env.GOVERSION }}
+    - uses: arduino/setup-protoc@a8b67ba40b37d35169e222f3bb352603327985b6 # v2.1.0
+      name: Install protobuf
+      with:
+        version: '24.0'
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
       uses: github/codeql-action/init@cdcdbb579706841c47f7063dda365e292e5cad7a # v2.13.4