ci: bump cosign version

.github/workflows/docker-release.yml

@@ -7,20 +7,19 @@ name: Docker
 
 on:
     #push:
-        #    branches: [main]
-        # Publish semver tags as releases.
-        #tags: ['v*.*.*']
+    #    branches: [main]
+    # Publish semver tags as releases.
+    #tags: ['v*.*.*']
     pull_request:
         branches: [main]
     release:
         types: [published]
     workflow_dispatch:
 
 permissions:
-      contents: read
-      packages: write
-      id-token: write
-
+    contents: read
+    packages: write
+    id-token: write
 
 env:
     # Use docker.io for Docker Hub if empty
@@ -49,7 +48,7 @@ jobs:
               if: github.event_name != 'pull_request'
               uses: sigstore/cosign-installer@main
               with:
-                  cosign-release: 'v2.1.1'
+                  cosign-release: 'v2.2.3'
 
             # Workaround: https://github.com/docker/build-push-action/issues/461
             - name: '🔧 Setup Docker buildx'