ci: renovate skip digest and fix cosign command (#474)

Signed-off-by: Alfonso Subiotto Marques <[email protected]>

Author: asubiotto

.github/workflows/container.yml

@@ -144,4 +144,4 @@ jobs:
         run: |
           podman manifest push --all "${IMAGE_NAME}:${IMAGE_TAG}" "docker://${IMAGE_NAME}:${IMAGE_TAG}"
           crane digest "${IMAGE_NAME}:${IMAGE_TAG}"
-          cosign sign --force -a "GIT_HASH=${COMMIT}" -a "GIT_VERSION=${IMAGE_TAG}" ghcr.io/parca-dev/parca-load@$(crane digest "${IMAGE_NAME}:${IMAGE_TAG}")
+          cosign sign -y -a "GIT_HASH=${COMMIT}" -a "GIT_VERSION=${IMAGE_TAG}" ghcr.io/parca-dev/parca-load@$(crane digest "${IMAGE_NAME}:${IMAGE_TAG}")

renovate.json

@@ -5,8 +5,7 @@
   ],
   "packageRules": [
     {
-      "matchManagers": ["github-actions"],
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "matchUpdateTypes": ["pin", "digest"],
       "enabled": false
     }
   ]