The Go JWT library has security issues against older versions
See https://github.com/golang-jwt/jwt/security
Also the 4.x branch of the library is no longer maintained so security findings will only increase. ghinstallation needs to move to the 5.x branch of JWT library