Bump sigstore from 3.5.3 to 3.6.0 #353

	name: Run HashiCorp Vault tests

	on:
	push:
	pull_request:

	jobs:
	local-vault:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout securesystemslib
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683

	- name: Set up Python
	uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b
	with:
	python-version: '3.x'
	cache: 'pip'
	cache-dependency-path: 'requirements*.txt'

	- name: Install system dependencies
	shell: bash
	run: \|
	sudo apt update && sudo apt install -y gpg wget
	wget -O- https://apt.releases.hashicorp.com/gpg \| \
	sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg

	gpg --no-default-keyring --fingerprint \
	--keyring /usr/share/keyrings/hashicorp-archive-keyring.gpg

	echo "deb [arch=$(dpkg --print-architecture) \
	signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] \
	https://apt.releases.hashicorp.com $(lsb_release -cs) main" \| \
	sudo tee /etc/apt/sources.list.d/hashicorp.list

	sudo apt update && sudo apt install -y vault

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install --upgrade tox

	- name: Run tests
	run: tox -e local-vault

Provide feedback