diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 17f80e0..69596d7 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -40,7 +40,7 @@ jobs:
     - name: Push containers
       run: make manifest-list | tee manifest.log
 
-    - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # tag=v3.9.2
+    - uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # tag=v3.10.0
 
     - name: Sign container
       run: make manifest-list-sign