diff --git a/images/mirror/Earthfile b/images/mirror/Earthfile
index 6ab8ed21db92c38e88d013e48863ff70f2138e4c..55ba2b67ea14d9a950a5f404d7fb65f916c29eee 100644
--- a/images/mirror/Earthfile
+++ b/images/mirror/Earthfile
@@ -29,7 +29,7 @@ fedora:
     DO +MIRROR --image=quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf
 
 cosign:
-    DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.1
+    DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.2
     SAVE ARTIFACT /ko-app/cosign ./cosign
 
 # verify-distroless allows to use cosign to verify all mirrored distroless images against Google's build identity