diff --git a/.github/workflows/golang.yml b/.github/workflows/golang.yml
index 361260f..af60726 100644
--- a/.github/workflows/golang.yml
+++ b/.github/workflows/golang.yml
@@ -79,7 +79,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v3.7.0
         with:
-          cosign-release: 'v2.2.4'
+          cosign-release: 'v2.4.1'
 
       - name: Login to container registries
         if: startsWith(github.ref, 'refs/tags/')
@@ -154,7 +154,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v3.7.0
         with:
-          cosign-release: 'v2.2.4'
+          cosign-release: 'v2.4.1'
 
       - name: Sign provenance
         run: |
@@ -190,7 +190,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v3.7.0
         with:
-          cosign-release: 'v2.2.4'
+          cosign-release: 'v2.4.1'
 
       - name: Generate provenance for ${{ matrix.repo }}
         uses: philips-labs/slsa-provenance-action@v0.9.0