diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d557ede..e73323e 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -61,7 +61,7 @@ jobs:
         push: ${{ github.event_name != 'pull_request' }}
         tags: ${{ steps.meta.outputs.tags }}
         labels: ${{ steps.meta.outputs.labels }}
-    - uses: sigstore/cosign-installer@v2.8.1
+    - uses: sigstore/cosign-installer@v3.5.0
     - name: cosign
       if: ${{ github.event_name != 'pull_request' }}
       env: