The version of go git module imported here has a critical security vulnerability which has been patched in v5.11+. https://nvd.nist.gov/vuln/detail/CVE-2023-49569