diff --git a/go.mod b/go.mod
index c96ba27..12a2d76 100644
--- a/go.mod
+++ b/go.mod
@@ -209,7 +209,7 @@ require (
 
 replace (
 	github.com/containerd/containerd => github.com/containerd/containerd v1.6.18
-	github.com/sigstore/cosign => github.com/sigstore/cosign v1.13.1
+	github.com/sigstore/cosign/v2 => github.com/sigstore/cosign v2.0.0
 	github.com/sylabs/sif/v2 => github.com/sylabs/sif/v2 v2.10.0
 	go.etcd.io/etcd/v3 => go.etcd.io/etcd/v3 v3.6.0-alpha.0
 	golang.org/x/net => golang.org/x/net v0.7.0