diff --git a/.github/workflows/release-job-image.yml b/.github/workflows/release-job-image.yml
index 9896f47b..d5d806e1 100644
--- a/.github/workflows/release-job-image.yml
+++ b/.github/workflows/release-job-image.yml
@@ -49,7 +49,7 @@ jobs:
           token: ${{ secrets.pat }}
 
       - name: Setup Cosign
-        uses: sigstore/cosign-installer@09a077b27eb1310dcfb21981bee195b30ce09de0
+        uses: sigstore/cosign-installer@5a02ebd2af776bdbc3d49b04456e6aef8a0b31dc
 
       - name: Setup Syft
         uses: ckotzbauer/actions-toolkit/setup-syft@0.18.0
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5f030642..535708b5 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -24,7 +24,7 @@ jobs:
         uses: docker/setup-buildx-action@v2
 
       - name: Setup Cosign
-        uses: sigstore/cosign-installer@09a077b27eb1310dcfb21981bee195b30ce09de0
+        uses: sigstore/cosign-installer@5a02ebd2af776bdbc3d49b04456e6aef8a0b31dc
 
       - name: Setup Syft
         uses: ckotzbauer/actions-toolkit/setup-syft@0.18.0