CGA-6688-9869-38cm

The vulnerable k8s.io/client-go v0.0.0-20191016111102-bec269661e48 cannot be updated as it is pinned to kubernetes-1.16.2 in go.mod. Because of significant changes in the module since then, updating to the fixed version (v0.17.0+) would require upstream code changes to handle the breaking changes introduced in newer Kubernetes client versions. Reference: https://github.com/mittwald/kubernetes-secret-generator/blob/1bf94b50ad1504926a5478d2618fc57dfb37b735/go.mod#L92

Govulncheck found vulnerable symbols in Go binaries at the following locations: in kubernetes-secret-generator-3.4.1-r1.apk, at usr/bin/manager, usr/bin/manager.