diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 53c86ba1..c51c1589 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -78,7 +78,7 @@ jobs:
           private-key-passphrase: ${{ secrets.DOCKER_PRIVATE_KEY_PASSPHRASE }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.4.0
+        uses: sigstore/cosign-installer@v3.5.0
         
       - name: Sign the published ghcr.io Docker image with Cosign
         run: |