Update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v2.3.4 -> v2.4.2
github/codeql-action	action	patch	v2.1.16 -> v2.1.17
sigstore/cosign-installer	action	minor	v2.4.1 -> v2.5.0
slsa-framework/slsa-github-generator	action	digest	575bdd2 -> e178bc7
slsa-framework/slsa-github-generator	action	minor	v1.1.1 -> v1.2.0

---

Release Notes

actions/checkout

v2.4.2

Compare Source

What's Changed

• Add set-safe-directory input to allow customers to take control. (#​770) by @​TingluoHuang in https://github.com/actions/checkout/pull/776
• Prepare changelog for v2.4.2. by @​TingluoHuang in https://github.com/actions/checkout/pull/778

Full Changelog: actions/checkout@v2...v2.4.2

v2.4.1

Compare Source

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory

v2.4.0

Compare Source

• Convert SSH URLs like org-<ORG_ID>@&#8203;github.com: to https://github.com/ - pr

v2.3.5

Compare Source

Update dependencies

github/codeql-action

v2.1.17

Compare Source

sigstore/cosign-installer

v2.5.0

Compare Source

What's Changed

• Update action to install cosign 1.10.0 by default by @​cpanato in https://github.com/sigstore/cosign-installer/pull/86

Full Changelog: sigstore/cosign-installer@v2.4.1...v2.5.0

slsa-framework/slsa-github-generator

v1.2.0

Compare Source

What's Changed

Generic generator

The highlight of this release is a new re-usable workflow called the "Generic generator". It lets users build artifacts on their own and generate a provenance that satisfies SLSA provenance 3 requirement. It's perfect to get started with SLSA with minimal changes to an existing build workflow. To use it, check the README.md!

Go builder

No changes.

New Contributors

• @​naveensrinivasan made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/352
• @​renovate-bot made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/401
• @​rarkins made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/489
• @​developer-guy made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/497
• @​loosebazooka made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/573

Full Changelog: v1.1.1...v1.2.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.