diff --git a/.github/workflows/docker-tag.yaml b/.github/workflows/docker-tag.yaml
index b45556a..04a82ba 100644
--- a/.github/workflows/docker-tag.yaml
+++ b/.github/workflows/docker-tag.yaml
@@ -51,7 +51,7 @@ jobs:
           cache-to: type=registry,ref=registry.uniproject.jp/official/analyze-bot:buildcache,mode=max
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4