Merge pull request #991 from k8s-infra-cherrypick-robot/cherry-pick-990-to-release-1.2

[release-1.2] security: fix CVE-2022-34903

Author: k8s-ci-robot

docker/Dockerfile

@@ -28,7 +28,8 @@ RUN export GOOS=$TARGETOS && \
 
 FROM $BASEIMAGE
 COPY --from=builder /go/src/sigs.k8s.io/secrets-store-csi-driver/_output/secrets-store-csi /secrets-store-csi
-RUN clean-install ca-certificates mount
+# upgrading gpgv due to CVE-2022-34903
+RUN clean-install ca-certificates mount gpgv
 
 LABEL maintainers="ritazh"
 LABEL description="Secrets Store CSI Driver"