diff --git a/.github/workflows/publishimage.yml b/.github/workflows/publishimage.yml
index 8c864cd6124..aaa6573791f 100644
--- a/.github/workflows/publishimage.yml
+++ b/.github/workflows/publishimage.yml
@@ -61,7 +61,7 @@ jobs:
             make install
             make scorecard-ko
      - name: Install Cosign
-       uses: sigstore/cosign-installer@c3667d99424e7e6047999fb6246c0da843953c65
+       uses: sigstore/cosign-installer@9e9de2292db7abb3f51b7f4808d98f0d347a8919
      - name: Sign image
        run: |
           cosign sign ghcr.io/${{github.repository_owner}}/scorecard/v4:${{ github.sha }}