diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index f898490c..440cbd4a 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -25,7 +25,7 @@ jobs:
       with:
         go-version: "1.23"
         check-latest: true
-    - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # tag=v2.8.1
+    - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # tag=v2.8.1
     - name: Set up QEMU
       uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # tag=v3.2.0
     - name: Docker login