Merge pull request #10003 from pdeslaur/tkn

tkn: Fix vulnerabilities

tkn.yaml

@@ -1,7 +1,7 @@
 package:
   name: tkn
   version: 0.33.0
-  epoch: 1
+  epoch: 2
   description: A CLI for interacting with Tekton!
   copyright:
     - license: Apache-2.0
@@ -15,10 +15,16 @@ environment:
       - go
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      uri: https://github.com/tektoncd/cli/archive/v${{package.version}}.tar.gz
-      expected-sha256: 18888780d58e1cd88fc943a6b15c9940599383466d33e11fa96f61f83bd755bc
+      repository: https://github.com/tektoncd/cli
+      tag: v${{package.version}}
+      expected-commit: 50af2e7bb1d5cf89b44798a23657276251277417
+
+  - uses: go/bump
+    with:
+      deps: github.com/go-jose/go-jose/[email protected] github.com/sigstore/cosign/[email protected] k8s.io/[email protected] k8s.io/[email protected] k8s.io/[email protected] k8s.io/[email protected]
+      go-version: "1.21"
 
   - runs: |
       make bin/tkn