diff --git a/.github/workflows/tag_release.yaml b/.github/workflows/tag_release.yaml
index 877cc946..30ad85d7 100644
--- a/.github/workflows/tag_release.yaml
+++ b/.github/workflows/tag_release.yaml
@@ -57,4 +57,4 @@ jobs:
         echo "${{ toJSON(steps.push.outputs) }}"
 
     - name: Install Cosign
-      uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # main
+      uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # main