fix: prevent attempt of double publishing of cosign.pub #3930

	name: Run Static Code Analysis

	# This workflow uses golangci-lint to run static code analysis on PRs
	# In addition to default golanci-linters checks vulnerability checks (gosec),
	# closing of openend http bodies (bodyclose), cyclomatic complexity (cyclop),
	# exhaustive switches (exhaustive) and open TODO/FIXME comments (godox)

	on:
	pull_request:
	branches: [ main ]
	merge_group: # run if triggered as part of a merge queue

	jobs:
	verify:
	name: Verify
	runs-on: ubuntu-latest
	permissions:
	contents: read
	checks: write
	steps:
	- name: 🛠️ Set up Go 1.x
	uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed #v5.1.0
	with:
	go-version: '~1.23'

	- name: ⬇️ Check out code into the Go module directory
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2

	- name: ✍️ Check format
	run: make lint

	- name: 🕵️ Go vet
	run: make vet

	- name: 🔎 golangci-lint
	uses: reviewdog/action-golangci-lint@7708105983c614f7a2725e2172908b7709d1c3e4 #v2.6.2
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	reporter: github-pr-check

Provide feedback