diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 98abf285b5b4143dfd305a66beaae09522aab649..9118485cf4d4b7d21326c1711d1373a75c58de03 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -670,7 +670,7 @@ jobs:
           node-version: ${{ needs.setup-build.outputs.node-version }}
           os: ${{ runner.os }}
 
-      - uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
+      - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
 
       - name: Docker registry login
         run: |