diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 38c6a62739d..4a617c200cd 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -35,7 +35,7 @@ jobs:
     steps:
       - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # v2.4.0
 
-      - uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605 # v2.0.1
+      - uses: sigstore/cosign-installer@bb61838e7ee5bf314f85f2e219b3706835fa6306 # v2.0.1
 
       - uses: actions/setup-go@f6164bd8c8acb4a71fb2791a8b6c4024ff038dab # v2.2.0
         with:
diff --git a/.github/workflows/github-oidc.yaml b/.github/workflows/github-oidc.yaml
index d6820f155a1..72c571eb5f5 100644
--- a/.github/workflows/github-oidc.yaml
+++ b/.github/workflows/github-oidc.yaml
@@ -41,7 +41,7 @@ jobs:
           go-version: '1.17.x'
 
       # Install tools.
-      - uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605 # v2.0.1
+      - uses: sigstore/cosign-installer@bb61838e7ee5bf314f85f2e219b3706835fa6306 # v2.0.1
       - uses: imjasonh/setup-ko@2c3450ca27f6e6f2b02e72a40f2163c281a1f675 # v0.4
 
       - name: Build and sign a container image