ci: update Github Actions

.github/workflows/docker-publish.yaml

@@ -7,11 +7,11 @@ name: Docker build & push to ghcr.io
 
 on:
   push:
-    branches: ["main"]
+    branches: ['main']
     # Publish semver tags as releases.
-    tags: ["v*.*.*"]
+    tags: ['v*.*.*']
   pull_request:
-    branches: ["main"]
+    branches: ['main']
 
 env:
   # Use docker.io for Docker Hub if empty
@@ -31,15 +31,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
         if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
-        with:
-          cosign-release: "v2.1.1"
+        uses: sigstore/[email protected]
 
       # Set up BuildKit Docker container builder to be able to build
       # multi-platform images and export cache
@@ -97,4 +95,3 @@ jobs:
         # This step uses the identity token to provision an ephemeral certificate
         # against the sigstore community Fulcio instance.
         run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
-