diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index 5507e92fcc..0b85028bd9 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           go-version: 1.17
           check-latest: true
-      - uses: sigstore/cosign-installer@v2.2.1
+      - uses: sigstore/cosign-installer@v2.3.0
 
       # Build ko from HEAD, build and push an image tagged with the commit SHA,
       # then keylessly sign it with cosign.
diff --git a/.github/workflows/kind-e2e.yaml b/.github/workflows/kind-e2e.yaml
index 5d7b81e5d9..ac60a006bd 100644
--- a/.github/workflows/kind-e2e.yaml
+++ b/.github/workflows/kind-e2e.yaml
@@ -35,7 +35,7 @@ jobs:
         registry-authority: ${{ env.REGISTRY_NAME }}:${{ env.REGISTRY_PORT }}
 
     - name: Install Cosign
-      uses: sigstore/cosign-installer@v2.2.1
+      uses: sigstore/cosign-installer@v2.3.0
       with:
         cosign-release: 'v1.7.2'