[bug] SLSA generator blocking build pipelnes and unable to leverage sigstore due to cosign v2.2.2.1

[saisatishkarra]

Describe the bug
@ianlewis / @haydentherapper I see that the cosign version is bumped to v2.2.3 in the master branch. Can this SLSA generator be referenced using a SHA? Is there a plan to make an immediate release tag to unblock downstream pipelines.

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

[haydentherapper]

Dup of #3350

[laurentsimon]

This is fixed.