diff --git a/.github/workflows/release-job-image.yml b/.github/workflows/release-job-image.yml
index e3142675..7bf3363e 100644
--- a/.github/workflows/release-job-image.yml
+++ b/.github/workflows/release-job-image.yml
@@ -49,7 +49,7 @@ jobs:
           token: ${{ secrets.pat }}
 
       - name: Setup Cosign
-        uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76
+        uses: sigstore/cosign-installer@7cc35d7fdbe70d4278a0c96779081e6fac665f88
 
       - name: Setup Syft
         uses: ckotzbauer/actions-toolkit/setup-syft@0.21.3
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 41470ded..4f5459b6 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -24,7 +24,7 @@ jobs:
         uses: docker/setup-buildx-action@v2
 
       - name: Setup Cosign
-        uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76
+        uses: sigstore/cosign-installer@7cc35d7fdbe70d4278a0c96779081e6fac665f88
 
       - name: Setup Syft
         uses: ckotzbauer/actions-toolkit/setup-syft@0.21.3