diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3d263d51..c56f26e0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -109,7 +109,7 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
-      - uses: sigstore/cosign-installer@v2.4.1
+      - uses: sigstore/cosign-installer@v2.5.0
       - uses: anchore/sbom-action/download-syft@v0.11.0
       - uses: docker/setup-qemu-action@v2
       - uses: docker/setup-buildx-action@v2