gha: bump sigstore/cosign-installer from 3.5.0 to 3.6.0 #1942

	name: Codespell

	# Documentation:
	# https://help.github.com/en/articles/workflow-syntax-for-github-actions

	# Start the job on all push #
	on:
	push:
	pull_request:
	workflow_dispatch:

	#concurrency:
	# group: ${{ github.workflow }}
	# cancel-in-progress: true

	permissions: read-all

	# Set the Job #
	jobs:
	build:
	name: Codespell
	# Set the agent to run on
	runs-on: ubuntu-24.04

	# Load all steps #
	steps:
	# Checkout the code base #
	- name: Harden Runner
	uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v1
	with:
	egress-policy: block
	disable-telemetry: true
	allowed-endpoints:
	github.com:443

	- name: Checkout Code
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v2.4.0
	with:
	# Full git history is needed to get a proper list of changed files within `super-linter`
	fetch-depth: 0

	# Run Linter against code base #
	- name: Codespell
	uses: codespell-project/actions-codespell@94259cd8be02ad2903ba34a22d9c13de21a74461 # master
	with:
	check_filenames: true
	ignore_words_file: .codespellignore

Provide feedback