diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 470e512..4c3c1d1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
             # https://github.com/sigstore/cosign-installer
           - name: Install Cosign
             if: github.event_name != 'pull_request'
-            uses: sigstore/cosign-installer@v3.8.2
+            uses: sigstore/cosign-installer@v3.9.0
             with:
                 cosign-release: 'v2.4.0'