Repository: cadence-workflow/cadence (language: go)

Issue:
Golang 1.17 has several security vulnerabilities 
**Version of Cadence server, and client(which language)**
This is very important to root cause bugs.
- Server version: `master` and `v0.24.0`
- Client version:
- Client langauge:

**Describe the bug**
A clear and concise description of what the bug is.

The current base image `golang:1.17.13-alpine3.15` of builder is detected for having many security vulnerabilities that can possibly be fixed in Golang version `>=1.19.2` or  `>=1.18.7`.

List of CVEs:
- CVE-2022-41715 (high)
- CVE-2022-2880 (high)
- CVE-2022-2879 (high)
- CVE-2022-27664 (high)
- CVE-2022-41716 (medium)

**To Reproduce**
Is the issue reproducible? 
- Yes, build the docker image from `master` branch and run an image scan with any vulnerability scanner.

**Steps to reproduce the behavior:**
A clear and concise description of the reproduce steps.
```sh
# checkout to master
git checkout master
git pull

# build server image
docker build . -f Dockerfile -t ubercadence/server:master --build-arg TARGET=server

# scan with any vulnerability scanner, in this case I used Twistlock
/usr/local/bin/twistcli images scan --details ubercadence/server:master
```

**Expected behavior**
A clear and concise description of what you expected to happen.

**Screenshots**
If applicable, add screenshots to help explain your problem.
![image](https://user-images.githubusercontent.com/18463816/204249846-6a6af8b4-a12e-42c6-bf84-92674a1a8b39.png)


**Additional context**
Add any other context about the problem here, E.g. Stackstace, workflow history.



Discussion / hints:

Fix patch:
diff --git a/Dockerfile b/Dockerfile
index a3faeedc1e8..524dfa05957 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@ ARG TARGET=server
 ARG GOPROXY
 
 # Build Cadence binaries
-FROM golang:1.17.13-alpine3.15 AS builder
+FROM golang:1.18.8-alpine3.15 AS builder
 
 ARG RELEASE_VERSION
 


Test patch: