Start

[Tanapl02]

        uses: sigstore/cosign-installer@main

To be consistent with our guidance? Unless the style for these examples requires pinning to a git commit

Originally posted by @dekkagaijin in https://github.com/actions/starter-workflows/pull/1255#discussion_r751797845 exit