Merge pull request #1884 from k8s-infra-cherrypick-robot/cherry-pick-1882-to-release-1.29

[release-1.29] test: fix stdlib CVE due to golang v1.22.2

Author: andyzhangx

.github/workflows/trivy.yaml

@@ -12,7 +12,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v4
         with:
-          go-version: ^1.16
+          go-version: 1.22.3
         id: go
 
       - name: Checkout code