diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4b93b37..14c0ee9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -27,7 +27,7 @@ jobs:
       with:
         go-version: '1.23'
         cache: true
-    - uses: sigstore/cosign-installer@v3.6.0         # installs cosign
+    - uses: sigstore/cosign-installer@v3.7.0         # installs cosign
 #    - uses: anchore/sbom-action/download-syft@v0.14.1 # installs syft
     - uses: docker/login-action@v3                   # login to ghcr
       with: