diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index 45aedc10aa..333cf705dd 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           go-version: 1.18
           check-latest: true
-      - uses: sigstore/cosign-installer@v2.8.0
+      - uses: sigstore/cosign-installer@v2.8.1
 
       # Build ko from HEAD, build and push an image tagged with the commit SHA,
       # then keylessly sign it with cosign.
diff --git a/.github/workflows/kind-e2e.yaml b/.github/workflows/kind-e2e.yaml
index 93f451f49b..fe35427150 100644
--- a/.github/workflows/kind-e2e.yaml
+++ b/.github/workflows/kind-e2e.yaml
@@ -35,7 +35,7 @@ jobs:
         registry-authority: ${{ env.REGISTRY_NAME }}:${{ env.REGISTRY_PORT }}
 
     - name: Install Cosign
-      uses: sigstore/cosign-installer@v2.8.0
+      uses: sigstore/cosign-installer@v2.8.1
       with:
         cosign-release: 'v1.7.2'
 
diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml
index 1e3a12a2d2..928802c77e 100644
--- a/.github/workflows/sbom.yaml
+++ b/.github/workflows/sbom.yaml
@@ -115,7 +115,7 @@ jobs:
           unzip tools-java-${SPDX_TOOLS_VERSION}.zip
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v2.8.0
+        uses: sigstore/cosign-installer@v2.8.1
         with:
           cosign-release: 'v1.7.2'