diff --git a/.github/workflows/release-master.yml b/.github/workflows/release-master.yml
index 65a2ea05..eb8f8bc5 100644
--- a/.github/workflows/release-master.yml
+++ b/.github/workflows/release-master.yml
@@ -50,7 +50,7 @@ jobs:
       # See issue https://github.com/actions/checkout/issues/760
       run: git config --global --add safe.directory $GITHUB_WORKSPACE
     - name: Install cosign
-      uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b
+      uses: sigstore/cosign-installer@a5d81fb6bdbcbb3d239e864d6552820420254494
     - name: Install Syft
       uses: anchore/sbom-action/download-syft@422cb34a0f8b599678c41b21163ea6088edb2624
     - uses: actions/checkout@v3