diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4454c49..f0b9cfd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -26,7 +26,7 @@ jobs:
 
       - run: ko build --image-refs=ko.images --bare --platform=all ./cmd/expander
 
-      - uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
+      - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
 
       - run: |
           # shellcheck disable=SC2046