diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 530d981bf7d..403cf74cb4d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -54,7 +54,7 @@ jobs:
       - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version: stable
-      - uses: sigstore/cosign-installer@v3.1.2
+      - uses: sigstore/cosign-installer@v3.2.0
       - uses: anchore/sbom-action/download-syft@v0.14.3
       - name: setup-validate-krew-manifest
         run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
diff --git a/.github/workflows/nightly-oss.yml b/.github/workflows/nightly-oss.yml
index be40d151a30..2cb91d8f99b 100644
--- a/.github/workflows/nightly-oss.yml
+++ b/.github/workflows/nightly-oss.yml
@@ -28,7 +28,7 @@ jobs:
       - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version: stable
-      - uses: sigstore/cosign-installer@v3.1.2
+      - uses: sigstore/cosign-installer@v3.2.0
       - uses: anchore/sbom-action/download-syft@v0.14.3
       - uses: crazy-max/ghaction-upx@v3
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f5802d38f9d..2ad8c25fd0e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -96,7 +96,7 @@ jobs:
             ./dist/*.rpm
             ./dist/*.apk
           key: ${{ github.ref }}
-      - uses: sigstore/cosign-installer@v3.1.2
+      - uses: sigstore/cosign-installer@v3.2.0
       - uses: anchore/sbom-action/download-syft@v0.14.3
       - uses: crazy-max/ghaction-upx@v3
         with: