diff --git a/.github/workflows/publish-release-bot.yml b/.github/workflows/publish-release-bot.yml
index 5473bdbf..e78a0d32 100644
--- a/.github/workflows/publish-release-bot.yml
+++ b/.github/workflows/publish-release-bot.yml
@@ -53,7 +53,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # @v3.5.0
+        uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # @v3.6.0
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
diff --git a/.github/workflows/publish-release-widget.yml b/.github/workflows/publish-release-widget.yml
index 97c7e654..b867d5fe 100644
--- a/.github/workflows/publish-release-widget.yml
+++ b/.github/workflows/publish-release-widget.yml
@@ -53,7 +53,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # @v3.5.0
+        uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # @v3.6.0
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3