diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml
index 11bdc429605b57122858fc3e110e134d85f29741..a854d5d607c99aa1731ede4045433edf36f6068c 100644
--- a/.github/workflows/artifacts.yaml
+++ b/.github/workflows/artifacts.yaml
@@ -64,7 +64,7 @@ jobs:
         uses: anchore/sbom-action/download-syft@1ca97d9028b51809cf6d3c934c3e160716e1b605 # v0.17.5
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
+        uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
 
       - name: Set image name
         id: image-name