diff --git a/.github/workflows/docker-publish-to-ghcr-express.yml b/.github/workflows/docker-publish-to-ghcr-express.yml
index 7a84958..0005553 100644
--- a/.github/workflows/docker-publish-to-ghcr-express.yml
+++ b/.github/workflows/docker-publish-to-ghcr-express.yml
@@ -23,7 +23,7 @@ jobs:
 
       - name: Install cosign
         if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@v3.5.0
+        uses: sigstore/cosign-installer@v4.0.0
         with:
           cosign-release: 'v2.2.4'
 
diff --git a/.github/workflows/docker-publish-to-ghcr-nginx.yml b/.github/workflows/docker-publish-to-ghcr-nginx.yml
index 90502ad..200cedf 100644
--- a/.github/workflows/docker-publish-to-ghcr-nginx.yml
+++ b/.github/workflows/docker-publish-to-ghcr-nginx.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Install cosign
         if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@1e95c1de343b5b0c23352d6417ee3e48d5bcd422
+        uses: sigstore/cosign-installer@430b6a704fe0c92f1b1261d84376a900f38d90ff
         with:
           cosign-release: 'v1.4.0'