diff --git a/.github/actions/sign-image/action.yaml b/.github/actions/sign-image/action.yaml
index dff26a08d6..c36d18ff38 100644
--- a/.github/actions/sign-image/action.yaml
+++ b/.github/actions/sign-image/action.yaml
@@ -14,7 +14,7 @@ runs:
   using: "composite"
   steps:
     - name: Install Cosign
-      uses: sigstore/cosign-installer@b3413d484cc23cf8778c3d2aa361568d4eb54679 # v2.5.1
+      uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
     - name: Sign image with a key
       shell: bash
       run: |