rekor/1.3.8 package update (#39777)

<p align="center">
<img
src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg"
/>
</p>

Signed-off-by: wolfi-bot <[email protected]>
Co-authored-by: wolfi-bot <[email protected]>

rekor.yaml

@@ -1,7 +1,7 @@
 package:
   name: rekor
-  version: 1.3.7
-  epoch: 2
+  version: "1.3.8"
+  epoch: 0
   description: Software Supply Chain Transparency Log
   copyright:
     - license: Apache-2.0
@@ -20,11 +20,7 @@ pipeline:
     with:
       repository: https://github.com/sigstore/rekor
       tag: v${{package.version}}
-      expected-commit: 4caadbc05cd0e7d8ba85ec431f4abb38ee27c599
-
-  - uses: go/bump
-    with:
-      deps: golang.org/x/[email protected] golang.org/x/[email protected]
+      expected-commit: 88b5ce53253bd3638364815b8990fd0c3823abab
 
 subpackages:
   - name: ${{package.name}}-server