Update main.yml

try to fix the release update . using cosing installation ??

Author: benlabbe

.github/workflows/main.yml

@@ -31,6 +31,15 @@ jobs:
           haskell: true
           large-packages: false
           swap-storage: true
+
+      # Install the cosign tool except on PR
+      # https://github.com/sigstore/cosign-installer
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@main
+        with:
+          cosign-release: 'v1.4.0'
+
       - name: Build image
         run: docker build -f ./Dockerfile-debian11 -t aymara/qhttpserver-debian11:build .
       - name: Extract package and version number from docker iamge
@@ -81,6 +90,13 @@ jobs:
           haskell: true
           large-packages: false
           swap-storage: true
+      # Install the cosign tool except on PR
+      # https://github.com/sigstore/cosign-installer
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@main
+        with:
+          cosign-release: 'v1.4.0'
       - name: Build image
         run: docker build -f ./Dockerfile-ubuntu22.04 -t aymara/qhttpserver-ubuntu22.04:build .
       - name: Extract package and version number from docker iamge