diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9a1186c..e487745 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -71,7 +71,7 @@ jobs:
           tags: ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
           provenance: mode=max
           sbom: true
-      - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+      - uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
       - name: Sign container image (keyless)
         env:
           DIGEST: ${{ steps.push.outputs.digest }}