Merge pull request #4 from protobom/dependabot/github_actions/sigstore/cosign-installer-3.7.0

Bump sigstore/cosign-installer from 3.5.0 to 3.7.0

Author: puerco

.github/workflows/release.yaml

@@ -31,7 +31,7 @@ jobs:
           cache: false
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
+        uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
 
       - name: Install bom
         uses: kubernetes-sigs/release-actions/setup-bom@a69972745f85aab4ba5d6c681e2a0e7f73eaff2b # v0.3.0