Made security review, applied recommendations.

sts-agent/Dockerfile

@@ -1,13 +1,14 @@
-FROM golang:1.27-trixie AS build
+FROM golang:1.27.3-trixie AS build
 
+ENV GOTOOLCHAIN=local CGO_ENABLED=0
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN go mod download
 COPY main.go main_test.go ./
-RUN CGO_ENABLED=0 go test ./... \
-    && CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /imds-emulator .
+RUN go test ./... \
+    && go build -trimpath -ldflags="-s -w" -o /imds-emulator .
 
-FROM gcr.io/distroless/static-debian13
+FROM gcr.io/distroless/static-debian13:latest
 
 COPY --from=build /imds-emulator /imds-emulator