diff --git a/.github/workflows/autorelease.yml b/.github/workflows/autorelease.yml
index 297a5e2400..41b9fbf265 100644
--- a/.github/workflows/autorelease.yml
+++ b/.github/workflows/autorelease.yml
@@ -32,7 +32,7 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
-      - uses: sigstore/cosign-installer@v3.0.5          # installs cosign
+      - uses: sigstore/cosign-installer@v3.1.1          # installs cosign
       - uses: anchore/sbom-action/download-syft@v0.14.2 # installs syft
       # ubuntu is missing wixl https://github.com/actions/virtual-environments/issues/3857
       -