v0.1.1

Changelog

• 54a7f94: fix(release): pin cosign to 2.x so the checksum signature keeps its detached files (@ion-alpha-dev)
• a29474d: fix(release): pin syft and goreleaser to exact versions for a reproducible release (@ion-alpha-dev)