diff --git a/.github/workflows/release-job-image.yml b/.github/workflows/release-job-image.yml
index 7bf3363e..55c85088 100644
--- a/.github/workflows/release-job-image.yml
+++ b/.github/workflows/release-job-image.yml
@@ -49,7 +49,7 @@ jobs:
           token: ${{ secrets.pat }}
 
       - name: Setup Cosign
-        uses: sigstore/cosign-installer@7cc35d7fdbe70d4278a0c96779081e6fac665f88
+        uses: sigstore/cosign-installer@c6d50c2e98b401591ef0ec04be0868d8f2626d0f
 
       - name: Setup Syft
         uses: ckotzbauer/actions-toolkit/setup-syft@0.21.3
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 212cb491..709ab1d0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -24,7 +24,7 @@ jobs:
         uses: docker/setup-buildx-action@v2
 
       - name: Setup Cosign
-        uses: sigstore/cosign-installer@7cc35d7fdbe70d4278a0c96779081e6fac665f88
+        uses: sigstore/cosign-installer@c6d50c2e98b401591ef0ec04be0868d8f2626d0f
 
       - name: Setup Syft
         uses: ckotzbauer/actions-toolkit/setup-syft@0.21.3