diff --git a/.github/workflows/push-build.yaml b/.github/workflows/push-build.yaml
index 59d31f188..8b0f49408 100644
--- a/.github/workflows/push-build.yaml
+++ b/.github/workflows/push-build.yaml
@@ -38,7 +38,7 @@ jobs:
           platforms: all
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@v3.10.0 # v3.10.0
+        uses: sigstore/cosign-installer@v4.0.0 # v3.10.0
 
       - name: log in to container registry
         uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0