Changelog:
============
-Incorrect tag naming in readme
-Utilize PyPI's trusted publishing
-Bump sigstore/cosign-installer from 3.3.0 to 3.4.0
-Add 1.7.7 to versions of bug template
-Use datetime to avoid updating copyright year
-filter data is safe for tarfile extractall
-Bump docker/setup-buildx-action from 3.0.0 to 3.1.0
-[B605] Add functions that are vulnerable to shell injection
-Add a SARIF output formatter
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
