Bump home-assistant/builder from 2023.06.0 to 2023.06.1 (#91)

* Bump home-assistant/builder from 2023.06.0 to 2023.06.1

Bumps [home-assistant/builder](https://github.com/home-assistant/builder) from 2023.06.0 to 2023.06.1.
- [Release notes](https://github.com/home-assistant/builder/releases)
- [Commits](home-assistant/builder@2023.06.0...2023.06.1)

---
updated-dependencies:
- dependency-name: home-assistant/builder
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Use cosign

* ongly ghcr.io

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pascal Vizeli <[email protected]>

.github/workflows/builder.yml

@@ -10,6 +10,10 @@ jobs:
   build:
     name: Build landingpage
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     strategy:
       matrix:
         machine:
@@ -37,13 +41,6 @@ jobs:
     - name: Checkout the repository
       uses: actions/checkout@v3
 
-    - name: Login to DockerHub
-      if: github.event_name == 'release'
-      uses: docker/[email protected]
-      with:
-        username: ${{ secrets.DOCKERHUB_USERNAME }}
-        password: ${{ secrets.DOCKERHUB_TOKEN }}
-
     - name: Login to GitHub Container Registry
       if: github.event_name == 'release'
       uses: docker/[email protected]
@@ -57,12 +54,13 @@ jobs:
       run: echo "BUILD_ARGS=--test" >> $GITHUB_ENV
 
     - name: Build landingpage
-      uses: home-assistant/[email protected].0
+      uses: home-assistant/[email protected].1
       with:
         args: |
           $BUILD_ARGS \
           --target /data \
           --no-latest \
+          --cosign \
           --machine landingpage=${{ matrix.machine }}
       env:
         CAS_API_KEY: ${{ secrets.CAS_TOKEN }}

build.yaml

@@ -1,5 +1,4 @@
-image: homeassistant/{machine}-homeassistant
-shadow_repository: ghcr.io/home-assistant
+image: ghcr.io/home-assistant/{machine}-homeassistant
 build_from:
   aarch64: scratch
   armv7: scratch
@@ -9,6 +8,9 @@ build_from:
 codenotary:
   signer: [email protected]
   base_image: [email protected]
+cosign:
+  base_identity: https://github.com/home-assistant/docker-base/.*
+  identity: https://github.com/home-assistant/landingpage/.*
 labels:
   io.hass.type: landingpage
   org.opencontainers.image.source: https://github.com/home-assistant/landingpage