update go builder and cosign image (sigstore#934)

Signed-off-by: cpanato <ctadeu@gmail.com>

Author: cpanato

.github/workflows/validate-release.yml

@@ -39,8 +39,8 @@ jobs:
       statuses: none
 
     env:
-      CROSS_BUILDER_IMAGE: ghcr.io/gythialy/golang-cross:v1.17.11-0@sha256:b0c3083b0a420ff649d5a5bfd7e0a96719ab0a7b3f99a049a4950d836a72637a
-      COSIGN_IMAGE: gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84
+      CROSS_BUILDER_IMAGE: ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d
+      COSIGN_IMAGE: gcr.io/projectsigstore/cosign:v1.10.0@sha256:a719237925984033fb72685c1998d922c903bbe62464f6d401b5108d3195bb94
 
     steps:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2

release/cloudbuild.yaml

@@ -32,16 +32,16 @@ steps:
     echo "Checking out ${_GIT_TAG}"
     git checkout ${_GIT_TAG}
 
-- name: 'gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84'
+- name: 'gcr.io/projectsigstore/cosign:v1.10.0@sha256:a719237925984033fb72685c1998d922c903bbe62464f6d401b5108d3195bb94'
   dir: "go/src/sigstore/rekor"
   env:
   - COSIGN_EXPERIMENTAL=true
   - TUF_ROOT=/tmp
   args:
   - 'verify'
-  - 'ghcr.io/gythialy/golang-cross:v1.18.3-0@sha256:d4614e3a12fd43b1ef29252d1add330c0b496b5313eda37975d4a87815a6ae90'
+  - 'ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d'
 
-- name: ghcr.io/gythialy/golang-cross:v1.18.3-0@sha256:d4614e3a12fd43b1ef29252d1add330c0b496b5313eda37975d4a87815a6ae90
+- name: ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d
   entrypoint: /bin/sh
   dir: "go/src/sigstore/rekor"
   env:
@@ -64,7 +64,7 @@ steps:
       gcloud auth configure-docker \
       && make release
 
-- name: ghcr.io/gythialy/golang-cross:v1.18.3-0@sha256:d4614e3a12fd43b1ef29252d1add330c0b496b5313eda37975d4a87815a6ae90
+- name: ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d
   entrypoint: 'bash'
   dir: "go/src/sigstore/rekor"
   env: