diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b43e377..a61b799 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -27,7 +27,7 @@ jobs:
         check-latest: true
 
     - name: Install cosign
-      uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2
+      uses: sigstore/cosign-installer@c3667d99424e7e6047999fb6246c0da843953c65 # v2
 
     - name: Install GoReleaser
       uses: goreleaser/goreleaser-action@f82d6c1c344bcacabba2c841718984797f664a6b # v3.1.0