Fix Jenkins build: set corp proxy CA, git `safe.directory` config in build container

Desired Outcome

CI was failing trying to build the summon-aws-secrets binaries:

go: downloading github.com/jmespath/go-jmespath v0.4.0
error obtaining VCS status: exit status 128
     Use -buildvcs=false to disable VCS stamping.

1
script returned exit code 1

Enabling GoReleaser's debug logging revealed the following logs:

    • getting and validating git state
       • running git               args=[-c log.showSignature=false rev-parse --is-inside-work-tree]
       • git result                stderr=fatal: unsafe repository ('/summon-aws-secrets' is owned by someone else)
To add an exception for this directory, call:

      git config --global --add safe.directory /summon-aws-secrets
 stdout=

This is a symptom of recent git versions (>v2.35.2) offering security fixes for CVE-2022-24765 for git on multi-user machines, include Docker containers.

Implemented Changes

Wrap goreleaser/goreleaser image in custom Dockerfile.releaser:
- Include CyberArk corporate proxy CA certs, so binaries can be built locally by CYBR devs
- Apply workaround for CVE-2022-24765, calling git config --global --add safe.directory /summon-aws-secrets
Update Dockerfile Golang version to match version in go.mod
Update CHANGELOG.md for v0.4.1 release

Connected Issue/Story

Resolves #[relevant GitHub issue(s), e.g. 76]

CyberArk internal issue link: ONYX-19910 ONYX-19912

Definition of Done

[x] Fix summon-aws-secret failing CI build
[x] Prepare for v0.4.1 release

Changelog

[x] The CHANGELOG has been updated, or
[ ] This PR does not include user-facing changes and doesn't require a CHANGELOG update

Test coverage

[ ] This PR includes new unit and integration tests to go with the code changes, or
[x] The changes in this PR do not require tests

Documentation

[ ] Docs (e.g. READMEs) were updated in this PR
[ ] A follow-up issue to update official docs has been filed here: [insert issue ID]()
[x] This PR does not require updating any documentation

Behavior

[ ] This PR changes product behavior and has been reviewed by a PO, or
[ ] These changes are part of a larger initiative that will be reviewed later, or
[x] No behavior was changed with this PR

Security

[ ] Security architect has reviewed the changes in this PR,
[ ] These changes are part of a larger initiative with a separate security review, or
[x] There are no security aspects to these changes

cyberark / summon-aws-secrets

Fix Jenkins build: set corp proxy CA, git `safe.directory` config in build container #58