Replace gopkg.in/yaml.v2 v2.2.2 with v2.2.8

[andytinkham]

Signed-off-by: Andy Tinkham [email protected]

Desired Outcome

Remove Snyk's perceived indirect dependency on gopkg.in/yaml.v2 v2.2.2

Implemented Changes

Added replace in conjur-env/go.mod to prune v2.2.2 and replace it with v2.2.8

Definition of Done

At least 1 todo must be completed in the sections below for the PR to be
merged.

Changelog

• The CHANGELOG has been updated, or
• This PR does not include user-facing changes and doesn't require a
  CHANGELOG update

Test coverage

• This PR includes new unit and integration tests to go with the code
  changes, or
• The changes in this PR do not require tests

Documentation

• [] Docs (e.g. READMEs) were updated in this PR
• A follow-up issue to update official docs has been filed here: insert issue ID
• This PR does not require updating any documentation

Behavior

• This PR changes product behavior and has been reviewed by a PO, or
• These changes are part of a larger initiative that will be reviewed later, or
• No behavior was changed with this PR

Security

• Security architect has reviewed the changes in this PR,
• These changes are part of a larger initiative with a separate security review, or
• There are no security aspects to these changes

[szh]

LGTM!