diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d99090ba09..2f62db0bae 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -143,7 +143,7 @@ jobs:
       uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
 
     - name: Setup Cosign
-      uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
+      uses: sigstore/cosign-installer@v3.2.0
 
     - name: Setup git config
       run: |
@@ -267,4 +267,4 @@ jobs:
         token: ${{ steps.generate_token.outputs.token }}
         repository: open-component-model/ocm-website
         event-type: ocm-cli-release
-        client-payload: '{"tag": "${{ env.RELEASE_VERSION }}"}'
\ No newline at end of file
+        client-payload: '{"tag": "${{ env.RELEASE_VERSION }}"}'