JH: update workflow

.github/workflows/jh-builder.yml

@@ -18,7 +18,7 @@ jobs:
       version: ${{ steps.version.outputs.version }}
     steps:
     - name: Checkout the repository
-      uses: actions/checkout@v3.5.2
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
 
@@ -36,12 +36,16 @@ jobs:
     name: Build ${{ matrix.arch }} base image
     needs: init
     runs-on: ${{ vars.RUNNER }}
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     strategy:
       matrix:
         arch: ${{ fromJson(needs.init.outputs.architectures) }}
     steps:
     - name: Checkout the repository
-      uses: actions/checkout@v3.5.2
+      uses: actions/checkout@v4
 
     - name: Get changed files
       id: changed_files
@@ -78,16 +82,9 @@ jobs:
         apk: "mariadb-dev;postgresql-dev;libffi-dev"
         requirements: "requirements.txt"
 
-    - name: Login to DockerHub
-      if: github.event_name == 'release'
-      uses: docker/[email protected]
-      with:
-        username: ${{ vars.DOCKERHUB_USERNAME }}
-        password: ${{ secrets.DOCKERHUB_TOKEN }}
-
     - name: Login to GitHub Container Registry
       if: github.event_name == 'release'
-      uses: docker/login-action@v2.1.0
+      uses: docker/login-action@v2.2.0
       with:
         registry: ghcr.io
         username: ${{ github.repository_owner }}
@@ -98,12 +95,13 @@ jobs:
       run: echo "BUILD_ARGS=--test" >> $GITHUB_ENV
 
     - name: Build base image
-      uses: jethub-homeassistant/builder@2023.03.0
+      uses: jethub-homeassistant/builder@2023.08.0
       with:
         args: |
           $BUILD_ARGS \
           --${{ matrix.arch }} \
           --target /data \
+          --cosign \
           --generic ${{ needs.init.outputs.version }}
       env:
         CAS_API_KEY: ${{ secrets.CAS_TOKEN }}