diff --git a/images/mirror/Earthfile b/images/mirror/Earthfile
index 6ffb2d7ef3232ffddb22afc072b6157bb7039151..93cc57f287ab6b0b9f4332ee3099c17df770967c 100644
--- a/images/mirror/Earthfile
+++ b/images/mirror/Earthfile
@@ -29,7 +29,7 @@ fedora:
     DO +MIRROR --image=quay.io/fedora/fedora:38@sha256:d643707ffb780448c26dd5164edba3291aa39dbd790d06fbf779511bbe32cba9
 
 cosign:
-    DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.0
+    DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.1
     SAVE ARTIFACT /ko-app/cosign ./cosign
 
 # verify-distroless allows to use cosign to verify all mirrored distroless images against Google's build identity