diff --git a/.github/workflows/build-push.yaml b/.github/workflows/build-push.yaml
index 4e8a3f4..1aed373 100644
--- a/.github/workflows/build-push.yaml
+++ b/.github/workflows/build-push.yaml
@@ -34,7 +34,7 @@ jobs:
         with:
           go-version-file: ${{ matrix.image }}/go.mod
 
-      - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.0.2
+      - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.0.2
       - uses: ko-build/setup-ko@ace48d793556083a76f1e3e6068850c1f4a369aa # v0.6
 
       - env: