Add configuration file for CodeQL vulnerability scanning.

Signed-off-by: Christian Kadner <ckadner@us.ibm.com>

Specify and link python38 to fix build/test failures due to
the wrong Python version (3.6) being used from base image.

---------

Signed-off-by: Rafael Vasquez <raf.vasquez@ibm.com>

Issues addressed:
- https://github.com/kserve/rest-proxy/security/dependabot/1
- https://github.com/kserve/rest-proxy/security/dependabot/2
- https://github.com/kserve/rest-proxy/security/dependabot/3
- https://github.com/kserve/rest-proxy/security/dependabot/4
- https://github.com/kserve/rest-proxy/security/dependabot/5
- https://www.cve.org/CVERecord?id=CVE-2023-37788

---------

Signed-off-by: Spolti <fspolti@redhat.com>

- Remove the linters for "deadcode", "structcheck", "varcheck"
- Use "os" packages instead of deprecated "io/ioutil" (SA1019)
- Capture pre-commit output in a local log file

---------

Signed-off-by: Spolti <fspolti@redhat.com>

chore: Fixes google.golang.org/protobuf Stack-based Buffer Overflow

https://security.snyk.io/vuln/SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908

Signed-off-by: Spolti <fspolti@redhat.com>

chore:	address the following CVE:
- [CVE-2023-48795](https://www.cve.org/CVERecord?id=CVE-2023-48795):
golang.org/x/crypto Authentication Bypass by Capture-replay

---------

Signed-off-by: Spolti <fspolti@redhat.com>

Some developers might not have the `docker` CLI installed anymore.
Configurable builder allows to build using `podman` or `buildah`.
It can be invoked like this: `ENGINE=podman make build`

---------

Signed-off-by: Spolti <fspolti@redhat.com>
Signed-off-by: Filippe Spolti <filippespolti@gmail.com>

This is to move away from CVE-20204-24786: infinite loop vulnerability.

Signed-off-by: Edgar Hernández <23639005+israel-hdez@users.noreply.github.com>

[RHOAIENG-5424] - golang.org/x/net Allocation of Resources Without
Limits or Throttling

chore: Fixes
[CVE-2023-45288](https://www.cve.org/CVERecord?id=CVE-2023-45288)

Signed-off-by: Spolti <fspolti@redhat.com>

Signed-off-by: Spolti <fspolti@redhat.com>

Signed-off-by: Christian Kadner <ckadner@us.ibm.com>

Signed-off-by: Christian Kadner <ckadner@us.ibm.com>

Signed-off-by: Christian Kadner <ckadner@us.ibm.com>

Signed-off-by: Spolti <fspolti@redhat.com>

chore: Fix the following issue while tring to build the develop
container,
	(reproducible locally with: `make build`):
```
	go: downloading gopkg.in/yaml.v3 v3.0.1
	/root/go/pkg/mod/github.com/grpc-ecosystem/grpc-gateway/v2@v2.15.0/protoc-gen-grpc-gateway/main.go:18:2: github.com/golang/glog@v1.2.1: missing go.sum entry for go.mod file; to add it:
        	go mod download github.com/golang/glog
```

Signed-off-by: Spolti <fspolti@redhat.com>

chore:  Fixes the following CVEs:
CVE-2023-45288 - Non-linear parsing of case-insensitive content in
golang.org/x/net/html
CVE-2024-45337 - Misuse of ServerConfig.PublicKeyCallback may cause
authorization bypass in golang.org/x/crypto

Signed-off-by: Spolti <fspolti@redhat.com>

[RHOAIENG-14237](https://issues.redhat.com/browse/RHOAIENG-14237) 
Depends on kserve/modelmesh-serving#536

Signed-off-by: Hannah DeFazio <h2defazio@gmail.com>