GHSA-c5q2-7r4c-mv6g/CVE-2024-28180 detected in square/go-jose

**What happened**:
[GHSA-c5q2-7r4c-mv6g](https://github.com/advisories/GHSA-c5q2-7r4c-mv6g)/[CVE-2024-28180](https://nvd.nist.gov/vuln/detail/CVE-2024-28180) was detected in multiple versions of eks-distro

square/go-jose deprecated since January 10, 2023, are there plans to replace it with https://github.com/go-jose/go-jose?

**What you expected to happen**:
go-jose is either replaced with maintained version or is removed.

Start by tracing eks-distro's dependency references to square/go-jose and review the GHSA-c5q2-7r4c-mv6g/CVE-2024-28180 advisory. Compare the maintained go-jose option, then verify that the vulnerable dependency is replaced or removed and the advisory is no longer detected.

Written by the indexing model from the issue text.