diff --git a/pkg/cosign/fulcio/fulcio.go b/cmd/cosign/cli/fulcio/fulcio.go
similarity index 100%
rename from pkg/cosign/fulcio/fulcio.go
rename to cmd/cosign/cli/fulcio/fulcio.go
diff --git a/pkg/cosign/fulcio/fulcio.pem b/cmd/cosign/cli/fulcio/fulcio.pem
similarity index 100%
rename from pkg/cosign/fulcio/fulcio.pem
rename to cmd/cosign/cli/fulcio/fulcio.pem
diff --git a/pkg/cosign/fulcio/fulcio_test.go b/cmd/cosign/cli/fulcio/fulcio_test.go
similarity index 100%
rename from pkg/cosign/fulcio/fulcio_test.go
rename to cmd/cosign/cli/fulcio/fulcio_test.go
diff --git a/cmd/cosign/cli/sign.go b/cmd/cosign/cli/sign.go
index ab93825e98b..c8fd2a44f8c 100644
--- a/cmd/cosign/cli/sign.go
+++ b/cmd/cosign/cli/sign.go
@@ -40,8 +40,8 @@ import (
 	"github.com/peterbourgon/ff/v3/ffcli"
 	"github.com/pkg/errors"
 
+	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign/pivkey"
 	cremote "github.com/sigstore/cosign/pkg/cosign/remote"
 	fulcioClient "github.com/sigstore/fulcio/pkg/client"
diff --git a/cmd/cosign/cli/verify.go b/cmd/cosign/cli/verify.go
index 0096c2c3d8c..528904f912a 100644
--- a/cmd/cosign/cli/verify.go
+++ b/cmd/cosign/cli/verify.go
@@ -26,8 +26,8 @@ import (
 	"github.com/peterbourgon/ff/v3/ffcli"
 	"github.com/pkg/errors"
 
+	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign/pivkey"
 	"github.com/sigstore/sigstore/pkg/signature"
 	"github.com/sigstore/sigstore/pkg/signature/payload"
diff --git a/cmd/cosign/cli/verify_attestation.go b/cmd/cosign/cli/verify_attestation.go
index 286a19b7a3d..fff87ab146a 100644
--- a/cmd/cosign/cli/verify_attestation.go
+++ b/cmd/cosign/cli/verify_attestation.go
@@ -23,8 +23,8 @@ import (
 	"github.com/peterbourgon/ff/v3/ffcli"
 	"github.com/pkg/errors"
 
+	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign/pivkey"
 	"github.com/sigstore/sigstore/pkg/signature"
 	"github.com/sigstore/sigstore/pkg/signature/dsse"
diff --git a/cmd/cosign/cli/verify_blob.go b/cmd/cosign/cli/verify_blob.go
index 150673f0821..7c52f8bfdeb 100644
--- a/cmd/cosign/cli/verify_blob.go
+++ b/cmd/cosign/cli/verify_blob.go
@@ -32,8 +32,8 @@ import (
 	"github.com/peterbourgon/ff/v3/ffcli"
 	"github.com/pkg/errors"
 
+	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign/pivkey"
 	rekorClient "github.com/sigstore/rekor/pkg/client"
 
diff --git a/cmd/sget/cli/sget.go b/cmd/sget/cli/sget.go
index 08bd62b89bf..ceb4cd21fa3 100644
--- a/cmd/sget/cli/sget.go
+++ b/cmd/sget/cli/sget.go
@@ -24,8 +24,8 @@ import (
 	"github.com/google/go-containerregistry/pkg/name"
 	"github.com/google/go-containerregistry/pkg/v1/remote"
 	"github.com/sigstore/cosign/cmd/cosign/cli"
+	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/fulcio"
 )
 
 func SgetCmd(ctx context.Context, imageRef, keyRef string) (io.ReadCloser, error) {
diff --git a/copasetic/main.go b/copasetic/main.go
index 622dc68b928..c75bbc80dd9 100644
--- a/copasetic/main.go
+++ b/copasetic/main.go
@@ -38,8 +38,8 @@ import (
 	"github.com/open-policy-agent/opa/types"
 
 	"github.com/sigstore/cosign/cmd/cosign/cli"
+	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
 	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/fulcio"
 	"github.com/sigstore/sigstore/pkg/signature"
 	"github.com/sigstore/sigstore/pkg/signature/options"
 )