The apicurito image builds the binary using go 1.11, which hasn't been productised and therefore isn't supported, even though this isn't delivered to customers - PST still need to track CVEs.

I have tested the build with 1.10, and this works once the vendor directory has been generated. This step needs to be done anyway as OSBS can't call to external sites. This step is performed outside of OSBS using go 1.11, and the build of apicurito-ui can then be carried out using the go 1.10 builder image https://brewweb.engineering.redhat.com/brew/buildinfo?buildID=771862