diff --git a/.github/workflows/reusable-release.yaml b/.github/workflows/reusable-release.yaml
index ac37a7938184..e3d481161945 100644
--- a/.github/workflows/reusable-release.yaml
+++ b/.github/workflows/reusable-release.yaml
@@ -36,7 +36,7 @@ jobs:
           remove-haskell: 'true'
 
       - name: Cosign install
-        uses: sigstore/cosign-installer@a5d81fb6bdbcbb3d239e864d6552820420254494
+        uses: sigstore/cosign-installer@9c520b997e685cb69e1ac226f7dce8114e8f36df
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v2