diff --git a/plugins/verifier/cosign/README.md b/plugins/verifier/cosign/README.md
index fbd51ce91..0a5cbabe7 100644
--- a/plugins/verifier/cosign/README.md
+++ b/plugins/verifier/cosign/README.md
@@ -71,6 +71,9 @@ $ ratify verify --config ~/.ratify/config.json --subject myregistry.io/example/h
 ## Keyless Verification
 This section outlines how to use `ratify` to verify the signatures signed using keyless signatures.
 
+> [!WARNING]
+> Cosign keyless verification may result in verification timeout due to Fulcio and Rekor server latencies
+
 ### Configuration
 
 ```json
diff --git a/test/bats/helpers.bash b/test/bats/helpers.bash
index 92ea9326b..755ea4fc2 100644
--- a/test/bats/helpers.bash
+++ b/test/bats/helpers.bash
@@ -68,6 +68,7 @@ wait_for_process() {
       return 0
     else
       sleep "$sleep_time"
+      echo "# retrying $cmd" >&3
       wait_time=$((wait_time - sleep_time))
     fi
   done
diff --git a/test/bats/plugin-test.bats b/test/bats/plugin-test.bats
index 9a260a89c..02cdc0564 100644
--- a/test/bats/plugin-test.bats
+++ b/test/bats/plugin-test.bats
@@ -81,8 +81,7 @@ SLEEP_TIME=1
     run kubectl replace -f ./config/samples/config_v1beta1_store_oras.yaml
     sleep 5
 
-    run kubectl run cosign-demo-keyless --namespace default --image=wabbitnetworks.azurecr.io/test/cosign-image:signed-keyless
-    assert_success
+    wait_for_process 20 10 'kubectl run cosign-demo-keyless --namespace default --image=wabbitnetworks.azurecr.io/test/cosign-image:signed-keyless'
 }
 
 @test "licensechecker test" {