fix cve

Signed-off-by: Batuhan Apaydin <[email protected]>

Author: developer-guy

snyk-cli.yaml

@@ -34,6 +34,11 @@ pipeline:
 
   - runs: git checkout -b release/wolfi # This is so the determine-release-channel.sh script decides the to use the correct channel and not create a -dev version
 
+  - uses: go/bump
+    with:
+      modroot: cliv2
+      replaces: github.com/whilp/git-urls=github.com/chainguard-dev/[email protected]
+
   - runs: |
       # Write our version so `make build` doesn't produce an incorrectly-bumped one
       echo "${{package.version}}" > binary-releases/version