diff --git a/.github/workflows/secure-build.yml b/.github/workflows/secure-build.yml
index 531c2d0..567df39 100644
--- a/.github/workflows/secure-build.yml
+++ b/.github/workflows/secure-build.yml
@@ -67,7 +67,7 @@ jobs:
 
       # 3. Setup Sigstore Cosign for keyless OIDC container signing
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.8.1
+        uses: sigstore/cosign-installer@v4.1.2
 
       # 4. Setup Docker Buildx with GHA caching support
       - name: Setup Docker Buildx
diff --git a/.github/workflows/staging-dast.yml b/.github/workflows/staging-dast.yml
index b70660d..45de955 100644
--- a/.github/workflows/staging-dast.yml
+++ b/.github/workflows/staging-dast.yml
@@ -44,7 +44,7 @@ jobs:
 
       # 3. Setup Sigstore Cosign for keyless image verification
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.8.1
+        uses: sigstore/cosign-installer@v4.1.2
 
       # 4. Authenticate to GitHub Container Registry (GHCR)
       - name: Log in to GitHub Container Registry