tests/globalkilltest: replace dgrijalva/jwt-go with form3tech-oss/jwt-go

[bb7133]

What is changed and how it works?

This is a succeeding PR of #28733 , which fix the security vulnerability of CVE-2020-26160.

Check List

Tests

• No code

Side effects

• None

Documentation

• None

Release note

None

[ti-chi-bot]

[REVIEW NOTIFICATION]

This pull request has been approved by:

• dveeden
• morgo

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

[dveeden]

Checking these shows that one has a know security issue (GO-2020-0017) and the other doesn't. Neither of these has a good scorecard.

• https://deps.dev/go/github.com%2Fdgrijalva%2Fjwt-go
• https://deps.dev/go/github.com%2Fform3tech-oss%2Fjwt-go

[dveeden]

https://github.com/form3tech-oss/jwt-go/blob/32ab6a8243d7efe20962a5a9df4cbca76db24973/README.md#L1-L3 says we should move to github.com/golang-jwt/jwt instead.

[bb7133]

https://github.com/form3tech-oss/jwt-go/blob/32ab6a8243d7efe20962a5a9df4cbca76db24973/README.md#L1-L3 says we should move to github.com/golang-jwt/jwt instead.

Thanks for the advice, github.com/golang-jwt/jwt is definitely a better fork but didn't make it work(see #28733).

[morgo]

/merge

[ti-chi-bot]

This pull request has been accepted and is ready to merge.

Commit hash: 72518db