diff --git a/.github/workflows/image-build.yaml b/.github/workflows/image-build.yaml
index 9e893b627..90893ac4f 100644
--- a/.github/workflows/image-build.yaml
+++ b/.github/workflows/image-build.yaml
@@ -174,7 +174,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@v3.5.0
+        uses: sigstore/cosign-installer@v3.7.0
 
       - name: Login to quay.io/bpfman
         uses: redhat-actions/podman-login@v1
@@ -568,7 +568,7 @@ jobs:
           go-version: '1.22' # yamllint disable-line rule:quoted-strings
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@v3.5.0
+        uses: sigstore/cosign-installer@v3.7.0
 
       - name: Checkout libbpf
         uses: actions/checkout@v4