Updated Sha for 2.3.60 version (#329)

* update 2.3.60 cli

* added in trivy ignore

* delete unnecesaary file

* Suppress 6 Go stdlib CVEs in app/bin/cx pending toolchain upgrade

Trivy flags these against ast-cli 2.3.60's embedded Go binary; fix requires
the same 1.26.6/1.27.0-rc.3 toolchain bump already tracked for the
golang.org/x/net CVEs above.

* chnaged code owner

Author: cx-sumit-morchhale

.github/workflows/scan-github-action.yml

@@ -23,3 +23,16 @@ CVE-2026-48978 # oras-go bearer token realm hijacking
 # Go Standard Library
 CVE-2026-39822 # Root escape via symlink + trailing slash
 CVE-2026-42505 # ECH privacy leak in crypto/tls
+
+# golang.org/x/net (via stdlib) - disclosed 2026-08-14, fix requires Go toolchain
+# upgrade to 1.26.6/1.27.0-rc.3 in ast-cli; tracked for the next cx release.
+CVE-2026-39821 exp=2026-09-30 # x/net/idna privilege escalation via incorrect Punycode label processing
+CVE-2026-46600 exp=2026-09-30 # x/net/dns/dnsmessage DoS via invalid DNS record parsing
+
+# Go stdlib (app/bin/cx, gobinary) - same Go 1.26.6/1.27.0-rc.3 toolchain upgrade as above
+CVE-2026-33818 exp=2026-09-30 # encoding/asn1 DoS via excessive recursion in Unmarshal
+CVE-2026-56853 exp=2026-09-30 # net/http unencrypted HTTP/2 connections DoS
+CVE-2026-56858 exp=2026-09-30 # html/template XSS via pathological input
+CVE-2026-56859 exp=2026-09-30 # encoding/xml DoS via recursion depth issue
+CVE-2026-56860 exp=2026-09-30 # net/url DoS from quadratic complexity in path parsing
+CVE-2026-56862 exp=2026-09-30 # crypto/tls DoS via indefinite KeyUpdate messages

.trivyignore

@@ -2,4 +2,4 @@
 # Each line is a file pattern followed by one or more owners
 
 # Specify the default owners for the entire repository
-*       @greensd4 @AlvoBen
+*       @cx-rakesh-kadu @cx-anurag-dalke @cx-rahul-pidde @cx-anand-nandeshwar @cx-amol-mane

CODEOWNERS

@@ -1,5 +1,5 @@
 # Use AST Base image
-FROM checkmarx/ast-cli:2.3.59@sha256:92102e087def76f9bfd3af5e8e153bd43a0f5499f118c317151e10f564ecf67a
+FROM checkmarx/ast-cli:2.3.60@sha256:ed98724a7a971034b9224eca19e5dca5fad3e1f3dc1624f301a9b766c446d210
 
 # Docker actions must be run by the default Docker user (root).
 USER root