👋 hi, we're attempting to fleetdm in our k8s env but our docker proxy flagged the image might be impacted by cve-2023-32698. Was hoping it was a really quick fix to update goreleaser/nfpm/v2 to 2.29.0 but dependabot already tried and had an error. i did some tracing and it looks to be caused by goreleaser/nfpm#618 where they removed files.ExpandContentGlobs used in linux_shared.so:189

I noticed the same thing this morning with our trivy scanner. its interesting a package builder like nfpm is getting built into the container in the first place. Seems like something that might be easier to remove from the container build? Edit; now that I think about it, its probably the orbit package generator that requires that.