Add `go.mod`/`go.sum` to global allowlist to prevent false positives found in hashes (!175)
Switch to use ubi8-minimal as the base FIPS image (!183)
Bump go-fips builder image to 1.18 (!180)