diff --git a/env0.plugin.yaml b/env0.plugin.yaml
index ead390b..febfe00 100644
--- a/env0.plugin.yaml
+++ b/env0.plugin.yaml
@@ -104,7 +104,7 @@ run:
     # SHA256 digests in sync; refresh both together (see the customManager in
     # renovate.json).
     # renovate: datasource=github-releases depName=sigstore/cosign
-    COSIGN_VERSION="v3.0.6"
+    COSIGN_VERSION="v3.1.2"
     COSIGN_SHA256_linux_amd64="c956e5dfcac53d52bcf058360d579472f0c1d2d9b69f55209e256fe7783f4c74"
     COSIGN_SHA256_linux_arm64="bedac92e8c3729864e13d4a17048007cfafa79d5deca993a43a90ffe018ef2b8"
     COSIGN_SHA256_darwin_amd64="4c3e7af8372d3ca3296e62fa56f23fcbb5721cc6ac1827900d398f110d7cd280"