Bump sigstore/cosign-installer from 3.5.0 to 3.6.0

[dependabot]

Bumps sigstore/cosign-installer from 3.5.0 to 3.6.0.

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.6.0

What's Changed

• Bump actions/checkout from 4.1.2 to 4.1.3 by @​dependabot in sigstore/cosign-installer#161
• Bump actions/checkout from 4.1.3 to 4.1.4 by @​dependabot in sigstore/cosign-installer#162
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @​dependabot in sigstore/cosign-installer#163
• Bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in sigstore/cosign-installer#164
• Bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in sigstore/cosign-installer#165
• Bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in sigstore/cosign-installer#166
• Bump actions/setup-go from 5.0.1 to 5.0.2 by @​dependabot in sigstore/cosign-installer#167
• pin public key used for verification by @​bobcallaway in sigstore/cosign-installer#169
• bump default version to v2.4.0 release by @​bobcallaway in sigstore/cosign-installer#168
• update readme for new release by @​bobcallaway in sigstore/cosign-installer#170

Full Changelog: sigstore/cosign-installer@v3...v3.6.0

Commits

• 4959ce0 update readme for new release (#170)
• 45ffe83 bump default version to v2.4.0 release (#168)
• 7e1d9c1 pin public key used for verification (#169)
• cc23fe1 Bump actions/setup-go from 5.0.1 to 5.0.2 (#167)
• b235ed9 Bump actions/checkout from 4.1.6 to 4.1.7 (#166)
• b49ef6b Bump actions/checkout from 4.1.5 to 4.1.6 (#165)
• 7a59e5a Bump actions/checkout from 4.1.4 to 4.1.5 (#164)
• 8d927bd Bump actions/setup-go from 5.0.0 to 5.0.1 (#163)
• 8c9caa0 Bump actions/checkout from 4.1.3 to 4.1.4 (#162)
• 19351d0 Bump actions/checkout from 4.1.2 to 4.1.3 (#161)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 87.77%. Comparing base (5f8509a) to head (90934b1).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2342   +/-   ##
=======================================
  Coverage   87.77%   87.77%           
=======================================
  Files          96       96           
  Lines        6847     6847           
  Branches       50       50           
=======================================
  Hits         6010     6010           
  Misses        780      780           
  Partials       57       57           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[sjberman]

@dependabot rebase