diff --git a/.github/workflows/tag_release.yaml b/.github/workflows/tag_release.yaml
index 3d346c8c..bad58d31 100644
--- a/.github/workflows/tag_release.yaml
+++ b/.github/workflows/tag_release.yaml
@@ -57,4 +57,4 @@ jobs:
         echo "${{ toJSON(steps.push.outputs) }}"
 
     - name: Install Cosign
-      uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # main
+      uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # main