diff --git a/.github/workflows/reusable-build.yml b/.github/workflows/reusable-build.yml
index 0480fceaf..7994cabba 100644
--- a/.github/workflows/reusable-build.yml
+++ b/.github/workflows/reusable-build.yml
@@ -99,7 +99,7 @@ jobs:
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
         # be careful when upgrading major versions
         with:
-          cosign-release: 'v3.1.2'
+          cosign-release: 'v3.1.3'
 
       - name: Install ORAS
         uses: oras-project/setup-oras@1d808f7d7f6995cc68b7bf507bfe5c5446e1dc9d # v2.0.1