Bump github.com/sigstore/rekor from 1.2.2 to 1.3.0 #381

	name: ci
	on:
	push:
	branches:
	- "main"
	pull_request:

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Set up Go 1.20
	uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version: '1.20'
	check-latest: true

	- name: Check out code into the Go module directory
	uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

	- uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
	with:
	path: \|
	~/.cache/go-build
	~/go/pkg/mod
	key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
	restore-keys: \|
	${{ runner.os }}-go-

	- name: Verify go.mod is sane
	run: go mod tidy && git diff --no-patch --exit-code

	- name: Install dependencies
	run: go mod download

	- name: Build
	run: make

	- name: Test
	run: make test

Provide feedback