diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 94742c9..1d3a48b 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -31,7 +31,7 @@ jobs:
             "https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb"
         dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
-    - uses: volker-raschek/cosign-installer@v4.1.2-rc3
+    - uses: volker-raschek/cosign-installer@v4.1.3-rc3
       with:
         cosign-release: "v3.1.1" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0