diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 4c5c6e3..12225e7 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -68,7 +68,7 @@ jobs:
             ghcr.io/agentrust-io/ca2a-runtime:latest
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@f713795cb21599bc4e5c4b58cbad1da852d7eeb9 # v3
+        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
 
       - name: Sign the image (keyless, by digest)
         env: