chore(ci): bump radiorabe/actions from 0.17.2 to 0.18.0 (#45)

* chore(ci): bump radiorabe/actions from 0.17.2 to 0.18.0

Bumps [radiorabe/actions](https://github.com/radiorabe/actions) from 0.17.2 to 0.18.0.
- [Release notes](https://github.com/radiorabe/actions/releases)
- [Commits](radiorabe/actions@v0.17.2...v0.18.0)

---
updated-dependencies:
- dependency-name: radiorabe/actions
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(ci): fix cosign verify

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lucas <hairmare@rabe.ch>

.github/workflows/release.yaml

@@ -10,11 +10,12 @@ on:
 
 jobs:
   release-container:
-    uses: radiorabe/actions/.github/workflows/release-container.yaml@v0.17.2
+    uses: radiorabe/actions/.github/workflows/release-container.yaml@v0.18.0
     with:
       image: ghcr.io/radiorabe/s2i-python
       name: s2i-python
       display-name: RaBe S2I Python Minimal
       tags: minimal rhel8 rabe s2i python python311
+      cosign-base-image-only: true
   mkdocs:
-    uses: radiorabe/actions/.github/workflows/release-mkdocs.yaml@v0.17.2
+    uses: radiorabe/actions/.github/workflows/release-mkdocs.yaml@v0.18.0

.github/workflows/schedule.yaml

@@ -7,6 +7,6 @@ on:
 
 jobs:
   call-workflow:
-    uses: radiorabe/actions/.github/workflows/schedule-trivy.yaml@v0.17.2
+    uses: radiorabe/actions/.github/workflows/schedule-trivy.yaml@v0.18.0
     with:
       image-ref: 'ghcr.io/radiorabe/s2i-python:latest'

.github/workflows/semantic-release.yaml

@@ -8,6 +8,6 @@ on:
 
 jobs:
   call-workflow:
-    uses: radiorabe/actions/.github/workflows/semantic-release.yaml@v0.17.2
+    uses: radiorabe/actions/.github/workflows/semantic-release.yaml@v0.18.0
     secrets:
       RABE_ITREAKTION_GITHUB_TOKEN: ${{ secrets.RABE_ITREAKTION_GITHUB_TOKEN }}

Dockerfile

@@ -1,3 +1,4 @@
+FROM registry.access.redhat.com/ubi9/python-311:1-7 as base
 FROM ghcr.io/radiorabe/s2i-base:2.1.1
 
 EXPOSE 8080
@@ -14,13 +15,13 @@ ENV \
     PIP_NO_CACHE_DIR=off \
     PATH=$APP_ROOT/bin:$HOME/bin:$HOME/.local/bin:$PATH
 
-COPY --from=registry.access.redhat.com/ubi9/python-311:1-7 \
+COPY --from=base \
      $STI_SCRIPTS_PATH/assemble \
      $STI_SCRIPTS_PATH/init-wrapper \
      $STI_SCRIPTS_PATH/run \
      $STI_SCRIPTS_PATH/usage \
      $STI_SCRIPTS_PATH/
-COPY --from=registry.access.redhat.com/ubi9/python-311:1-7 \
+COPY --from=base \
      $APP_ROOT/etc/scl_enable \
      $APP_ROOT/etc/