File _servicedata of Package cosign

<servicedata>
<service name="tar_scm">
                <param name="url">https://github.com/sigstore/cosign</param>
              <param name="changesrevision">479147a4df05f31be48aeb2b3a9d32dfc35ba877</param></service></servicedata>