chore(deps): bump actions/attest from 4.2.0 to 4.2.2 (#14)

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/build.yaml

@@ -123,7 +123,7 @@ jobs:
           COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
 
       - name: Generate image digest attestation
-        uses: actions/attest@v4.2.0
+        uses: actions/attest@v4.2.2
         with:
           subject-name: ${{ steps.cfg.outputs.image }}
           subject-digest: ${{ steps.build.outputs.digest }}

.github/workflows/mirror-trivy-db.yaml

@@ -108,7 +108,7 @@ jobs:
 
       - name: Attest mirrored artifact
         if: steps.copy.outputs.digest != ''
-        uses: actions/attest@v4.2.0
+        uses: actions/attest@v4.2.2
         with:
           subject-name: ${{ matrix.target }}
           subject-digest: ${{ steps.copy.outputs.digest }}