diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dc2d512..5ed2644 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           go-version: 1.16.x
 
-      - uses: sigstore/cosign-installer@v2.4.1         # installs cosign
+      - uses: sigstore/cosign-installer@v2.5.0         # installs cosign
       - uses: anchore/sbom-action/download-syft@v0.11.0 # installs syft
 
       - uses: actions/checkout@v3