Merge pull request #45 from splattner/renovate/sigstore-cosign-installer-3.x

Update sigstore/cosign-installer action to v3.8.0

Author: splattner

.github/workflows/release.yaml

@@ -30,7 +30,7 @@ jobs:
     # Install the cosign tool except on PR
     # https://github.com/sigstore/cosign-installer
     - name: Install cosign
-      uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
+      uses: sigstore/cosign-installer@c56c2d3e59e4281cc41dea2217323ba5694b171e # v3.8.0
 
     - uses: anchore/sbom-action/download-syft@v0.17.8 # installs syft