fix: update Snyk base image

Update Snyk Base Image to pickup security fixes.

-- 
Snyk ProdSec

vervet-underground/Dockerfile

@@ -28,7 +28,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
 # we're not changing anything, only making it explicit.
 # Thanks to emulation, this will also run on ARM Macs.
 # Advised to move from distroless to the secure base image - https://docs.google.com/document/d/1I-vxsuHlmBlM8JHSDpvOmVMGeQQcbPgb8jH1ELEE9wo/edit#heading=h.1xke9mez8zov
-FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.1_202403150706
+FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.7_202404190856
 
 COPY config.*.json /
 COPY --from=builder /go/bin/app /