diff --git a/.github/actions/install-tools/action.yaml b/.github/actions/install-tools/action.yaml
index e615be46bd..31940fab57 100644
--- a/.github/actions/install-tools/action.yaml
+++ b/.github/actions/install-tools/action.yaml
@@ -4,7 +4,7 @@ description: "Install pipeline tools"
 runs:
   using: composite
   steps:
-    - uses: sigstore/cosign-installer@v2.8.1
+    - uses: sigstore/cosign-installer@v3.0.1
 
     - uses: anchore/sbom-action/download-syft@v0.13.3