diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8a942fa0669..c4621311dec 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -54,7 +54,7 @@ jobs:
         with:
           go-version: '>=1.19.2'
           cache: true
-      - uses: sigstore/cosign-installer@v2.7.0
+      - uses: sigstore/cosign-installer@v2.8.0
       - uses: anchore/sbom-action/download-syft@v0.12.0
       - name: setup-validate-krew-manifest
         run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6c3bd013c8c..f799afafbb8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -72,7 +72,7 @@ jobs:
             ./dist/*.rpm
             ./dist/*.apk
           key: ${{ github.ref }}
-      - uses: sigstore/cosign-installer@v2.7.0
+      - uses: sigstore/cosign-installer@v2.8.0
       - uses: anchore/sbom-action/download-syft@v0.12.0
       - name: dockerhub-login
         if: startsWith(github.ref, 'refs/tags/v')