diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 50e6bd0..dc1becf 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -45,7 +45,7 @@ jobs:
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3
+        uses: sigstore/cosign-installer@v4.1.2
 
       - name: Install Syft
         uses: anchore/sbom-action/download-syft@v0