chore(deps): bump the actions group with 2 updates

Bumps the actions group with 2 updates: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) and [chainguard-dev/actions](https://github.com/chainguard-dev/actions).


Updates `sigstore/cosign-installer` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@faadad0...ba7bc0a)

Updates `chainguard-dev/actions` from 1.6.5 to 1.6.7
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@71714a7...5e84f02)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: chainguard-dev/actions
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/build.yaml

@@ -48,7 +48,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
+      - uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
 
       - name: Extract version of Go to use
         run: echo "GOVERSION=$(awk -F'[:@]' '/FROM golang/{print $2; exit}' Dockerfile)" >> $GITHUB_ENV

.github/workflows/donotsubmit.yaml

@@ -40,4 +40,4 @@ jobs:
           persist-credentials: false
 
       - name: Do Not Submit
-        uses: chainguard-dev/actions/donotsubmit@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+        uses: chainguard-dev/actions/donotsubmit@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7

.github/workflows/e2e-tests.yml

@@ -149,7 +149,7 @@ jobs:
         cache: false
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+      uses: chainguard-dev/actions/setup-mirror@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7
       with:
         mirror: mirror.gcr.io
 
@@ -257,4 +257,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+      uses: chainguard-dev/actions/kind-diag@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7

.github/workflows/kind-verify-attestation.yaml

@@ -181,7 +181,7 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+      uses: chainguard-dev/actions/kind-diag@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7
 
     - name: Create vuln attestation for it
       run: |

.github/workflows/tests.yaml

@@ -185,7 +185,7 @@ jobs:
 
       - name: Collect diagnostics
         if: ${{ failure() }}
-        uses: chainguard-dev/actions/kind-diag@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+        uses: chainguard-dev/actions/kind-diag@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7
 
   e2e-windows-powershell-tests:
     name: Run PowerShell E2E tests

.github/workflows/whitespace.yaml

@@ -38,8 +38,8 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: chainguard-dev/actions/trailing-space@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+      - uses: chainguard-dev/actions/trailing-space@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7
         if: ${{ always() }}
 
-      - uses: chainguard-dev/actions/eof-newline@71714a76c3df10b544595a2294c16649dc3472e5 # v1.6.5
+      - uses: chainguard-dev/actions/eof-newline@5e84f02889db0de213947c80a5d75b51bb899048 # v1.6.7
         if: ${{ always() }}