build(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 #228

	# This workflow will build a golang project
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go

	name: Go

	on:
	push:
	branches: [ "master", "main", $default-branch ]
	pull_request:
	branches: [ "master", "main", $default-branch ]

	permissions:
	contents: read

	jobs:

	build:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Go
	uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
	with:
	go-version: '1.22'

	- name: Go Vet
	run: go vet ./...

	- uses: dominikh/staticcheck-action@v1.3.1
	with:
	version: "latest"
	install-go: false

	- name: Go StaticCheck
	run: go vet ./...

	- name: Build
	run: go build -v ./...

	- name: Test
	run: go test -v ./...

Provide feedback