chore(deps): update dependency sigstore/cosign to v1.7.2

[renovate]

This PR contains the following updates:

Package	Update	Type	Change	Package file	References
sigstore/cosign	patch	uses-with	v1.7.1 → v1.7.2	.github/workflows/docker-publish.yml	source

---

Release Notes

sigstore/cosign (sigstore/cosign)

v1.7.2

Compare Source

Bug Fixes

• Make public all types required to use ValidatePolicy (#​1727)
• fix: add permissions to patch events (#​1722)
• Fix publicKey unmarshal (#​1719)
• Update release job (#​1720)
• Makefile: fix directory not found error (#​1718)

Others

• Remove newline from download sbom output (#​1732)
• Bump github.com/hashicorp/go-uuid from 1.0.2 to 1.0.3 (#​1724)
• Add unit tests for IntotoAttestation verifier. (#​1728)
• Bump github/codeql-action from 2.1.7 to 2.1.8 (#​1725)
• Bump cloud.google.com/go/storage from 1.21.0 to 1.22.0 (#​1721)
• Bump sigstore/cosign-installer from 2.1.0 to 2.2.0 (#​1723)
• Bump github.com/xanzy/go-gitlab from 0.61.0 to 0.62.0 (#​1711)
• Bump google-github-actions/auth from 0.6.0 to 0.7.0 (#​1712)
• Bump github/codeql-action from 2.1.6 to 2.1.7 (#​1713)
• Bump codecov/codecov-action from 2.1.0 to 3 (#​1714)

Contributors

• Carlos Tadeu Panato Junior (@​cpanato)
• Denny (@​DennyHoang)
• Hector Fernandez (@​hectorj2f)
• Josh Dolitsky (@​jdolitsky)
• Rob Best (@​ribbybibby)
• Ville Aikas (@​vaikas)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.